{"report_id":"941b7c6b-1724-4706-ac4e-b7f61d127d5e","version":6,"status":"done","tags":[],"date":"2026-02-27T18:28:26Z","url":{"schema":"http","addr":"pixdasortefun.fun","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"172.67.208.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"title":"Pixdasorte bet - Aposte com segurança","dom":{"size":421053,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20598)","md5":"da351f16b1ed81d9609c12cc3c626276","sha1":"c830483c4f1c6695bc951280347742b7b40ddf8d","sha256":"9824e531444d94e0840df36b99b79c40629dd66710c1c31d417348d84f2e328d","sha512":"a803abc7b6e04bfeee06cd34139b6b62230e06ac68cfc533d5b14ff8d44f3ce0a0b3e6c7ffea5fbde494cb61e49f1bb719f24d8a11b69010444404a51387629e","ssdeep":"3072:4cyvhLhe7rthG+si7dWdh5G77ytNlGmPkqnj3nQpN:+vhLhe7rSgdWdh5G77yNj3nu","tlshash":"4d942974a2e211ba5023d3d0baa76b29353d9593de0bc54c77ec02a19fc7cdd8827ad4","dom_hash":"domhashf04bede577830582e859f32b3b2d97c9","first_seen":"2026-02-27T18:28:34.946505Z","last_seen":"2026-02-27T18:28:34.946505Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pixdasortefun.fun","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"172.67.208.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T18:28:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T18:28:06Z","timestamp":1772216886,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44708,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T18:28:06.167002+0000\",\"flow_id\":579472192847735,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.43\",\"src_port\":44708,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2026-02-27T18:28:06.147319+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T18:28:06Z","timestamp":1772216886,"ip_dst":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37314,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T18:28:06.705067+0000\",\"flow_id\":1506631077992002,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.43\",\"src_port\":37314,\"dest_ip\":\"104.237.62.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":917,\"bytes_toclient\":1654,\"start\":\"2026-02-27T18:28:06.398914+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-22T23:25:47.841062Z","alert_count":0,"request_count":2,"received_data":785660,"sent_data":776,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"api64.ipify.org","ip":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2014-01-05","domain_rank":26688,"first_seen":"2020-08-17T05:58:17Z","last_seen":"2026-02-25T20:53:45.34837Z","alert_count":0,"request_count":1,"received_data":208,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixdasortefun.fun","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-02-27T18:28:27.146366Z","last_seen":"2026-02-27T18:28:27.146366Z","alert_count":22,"request_count":22,"received_data":480787,"sent_data":11552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"api6.ipify.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":226847,"first_seen":"2019-05-13T11:53:14Z","last_seen":"2026-02-27T16:11:48.515479Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1233,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-23T08:58:07.99797Z","alert_count":0,"request_count":3,"received_data":813,"sent_data":1230,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ads-manager.sistemasconnect.com","ip":{"addr":"172.67.163.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":7742,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-23T04:50:45.056452Z","alert_count":0,"request_count":2,"received_data":815949,"sent_data":752,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"img.utdstc.com","ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-10-18","domain_rank":661585,"first_seen":"2014-02-12T20:21:29Z","last_seen":"2026-02-27T18:19:30.835781Z","alert_count":0,"request_count":1,"received_data":16120,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d4b8b9ca3c7fd14384bf5a8faa82a0","sha1":"6f66ab3f370c29cc70a44381f84e675823f48e05","sha256":"18a18caa22fb8794cf3b3ece0c5a270e456d626c5868a82bd52db00e0dc2cffc","sha512":"7eb559e76dac3d99af691fd2342ea29bd82af92104840be7b8d256a8be98ad84759f3032fdd74b0b8f100ca252ce82edc1996c8fdddb6f56dec939f0f7fe06f7","ssdeep":"","tlshash":"7a8000ae0082083a00a000000a232a32332b0822008e0000e3c3032ef8b20038008e8a","size":30,"data":"","first_seen":"2026-02-01T08:53:43.725051Z","last_seen":"2026-02-27T18:33:02.591422Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/components/auth/ipfy.js","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55180ff80f60751ef370c33eea6fea07","sha1":"ff3e1c62009001e0505ab8cf455797facbfb9847","sha256":"748100143447e57f7877407233e91a2baa841f30231d7838bc346ab2db17ee2c","sha512":"489af5c4f0264269bf0adc6923cd33c4fbf0f3d2a9e2c4f57e173b2e0ed728d3bb380aee1e93611a790faafa7b865f6df6e24e0ab3c4538e680b7484b7467562","ssdeep":"","tlshash":"ee61dcaa38f72535025371b90aaf92457132a4077689cd997a5c82103f5423a9bf2fcc","size":3202,"data":"","first_seen":"2026-02-27T18:19:54.201015Z","last_seen":"2026-02-27T18:33:02.551136Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/includes/ipfy.js","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abbacedb349c8e3cf5df807783039997","sha1":"9eb553ba32cf159c4e6141fa56ddf32c0f7e76d2","sha256":"f044218065aa71eecfddfdef69a1f039c3b2c32ce4e7ac1f2474d3810c6c72fa","sha512":"b1798206212b4cc55e321c961820a40ef889010d78a545eede9536bbee3a3c17d7c0cac252580642cd32debe6d4cad37da57cb4077cab8dec622d820eeebc75a","ssdeep":"","tlshash":"a941dae922f7606e0a63206c1bebc10b6727d40b3b89c5587e9c71022f8527987f1bc8","size":2326,"data":"","first_seen":"2026-02-27T18:19:54.208801Z","last_seen":"2026-02-27T18:33:02.58015Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d74a6e2b6564846107de1750c751065","sha1":"d791c10c4db9386527f5afe6442b1cb4596c51cf","sha256":"5382a3be37d8b852bdd6001f02454c1d79618833c274f30eabded2ee1788d1c4","sha512":"59a41d218a4b5b0d9de5fae3a2c26a543760f598c257a731c021d0354f9005c27f793a061c3800dfb818a8cf8ba76a5d255e0a733bc0d11884c6c4e416782df0","ssdeep":"","tlshash":"a051529cb464507455f64504cc9b2706163abb737cc680e1faba98693f3dc077503aee","size":2513,"data":"","first_seen":"2026-02-27T18:28:22.581935Z","last_seen":"2026-02-27T18:31:37.026671Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c56cbaed63aafca86bea4881b389fd07","sha1":"64b2c3fbb3d8ca2562d916173d4b2ba648a4d622","sha256":"2f0f02f3c3fbfb8d3477d00ee69914afc3287df818b62558639ccbdf21094120","sha512":"e927bce59cf486ff2b66f7666e685312e92a199ba06dac436a6f2dd7ef13b403bf03f61f7b7b86fc6dd2ff424a5b56f7037447901a0eb67940f583f0f691a37b","ssdeep":"","tlshash":"f9c02b46033020280a40102859dd3230b2b7c40b097972a0d04047a47f1e327e07a6cc","size":150,"data":"","first_seen":"2026-02-27T18:28:22.583346Z","last_seen":"2026-02-27T18:31:37.027146Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0ab6384cc1014ecb2b95b649e2ec06c","sha1":"fba270bc4d2084425f0153bec24b1e53de164775","sha256":"88d848f10f7eaa6b6deff692b86ec4fa95580fbb3c69bdffbd6fdaed48dcf59d","sha512":"7a9c0e9459f9b999f5758052266e8f0f66f36d84a1292cb8949a8b11e63e6e7348e95e2d376486b4cc4dfb37853e54f0193374c5cf6fd1fa563bf5340394e2ef","ssdeep":"","tlshash":"2580002e0082083a00a0000002232a30332a0802008a0000a383022eb8b20030008c8a","size":26,"data":"","first_seen":"2026-02-27T18:19:54.238245Z","last_seen":"2026-02-27T18:33:02.592885Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"674dcfff2bd509ea39a280910890c9b6","sha1":"b4a8862cd26b916260383fa130e674d8d4192248","sha256":"719d0504e79a5fea70038ed97c1c55dd3cc2f4045fe5150e7dad98aef498fa32","sha512":"5c49f7fbc59e08b1b820c97facb40419aaef0c0a1fb68566cd357a5a88dbe130a06cd84a0137df8144665535597c30aa56e09e7bfc43f94265f69a41b5e906c7","ssdeep":"","tlshash":"8741befd30a1213a09fb18de75ffd2847a359487b0c6d821719d460d8fa4a8a8422edc","size":2126,"data":"","first_seen":"2026-02-27T18:19:54.243777Z","last_seen":"2026-02-27T18:33:02.593546Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab5cf78e50073ef3285cf0696455f16a","sha1":"e0bbab2f1e8d4abd25095fbb20bd84e7c6355fbe","sha256":"6fcfc1248c59277f00c0e922d8133bd7d1e2e677f84708e672d8aff3b96301d5","sha512":"1bd282859ae3995e77443d4d393afc4353426a36babfec217b698702301e46d8526d24deef0c5f1a310e43aba4c53d582ebffb6bbf737866d04eda3d97c28084","ssdeep":"96:XrDxJeNetj59WhOQgg3sggUpKq+wO/tkZptk0gv5cgbNoak1g/srw/hb/oW/:bneItj7WcQgUsghpKqJZo0gvjbNoak1a","tlshash":"d3a1749639b5143049f758eb36ef8690756a446a7cc8c8953bac88885f73b808673bdc","size":4745,"data":"","first_seen":"2026-02-27T18:28:22.586472Z","last_seen":"2026-02-27T18:31:37.028809Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a370c306603cd419fcbbbd07259bddaf","sha1":"fbf4c0a484b118a246f2a1649d4dde7efbdcc9ee","sha256":"a497f4b8322968cff0456a2fb8fc8714c0eacb5a30b58d7190b0d267781ce498","sha512":"8aae38571212e2a136b059058f3dbe332e9f0fcef2d8d6c93b6575f4800b75e2633b28b444985d1fe0c8e9534f72265f85c316c45ba99f90025848ae1858c723","ssdeep":"96:OlKZxiiRXpdPKVlG+kpF3q5VbzQ36zPXDn42EXdn7datyqt9HHtxG1AHic0WTy:OpCb+jTzQ36zkwNdiGTy","tlshash":"d3b1de9eb9be317645bb3b7fabdf696c213280430c09c842797c95802fd48645977ec9","size":5230,"data":"","first_seen":"2026-02-27T18:19:54.256604Z","last_seen":"2026-02-27T18:33:02.59545Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-11T09:52:34.847125Z","times_seen":48791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87db2426701d1b46802a56e3eb641903","sha1":"14842647b6ec8d92c73739cc19820cdfdef81e81","sha256":"445e3fac3872a41e866d82e5525a908779df09a05f9188180556c7f11b6b9c88","sha512":"a06b8104bccf4bc27b242733d6ec735442f4b463b7a55b50d3ee17dad08a4beefbe68ebca9b485718d540d75a4f957ca00beb10db4471120a9af9f8356492b62","ssdeep":"","tlshash":"0181ff6fb0f2243644f738ba36ef92743535800364cac4193aed864d5fa294689e36fc","size":3826,"data":"","first_seen":"2026-02-27T18:19:54.261938Z","last_seen":"2026-02-27T18:33:02.596156Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T09:53:20.781535Z","times_seen":417988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e82c31553d64e352beb286f823e96433","sha1":"e33a4b6d3bc02432b064d82cdbf28c06ac38c487","sha256":"84bbaef6c1f332ddd1450bcbdef95d0fb31bdac3abc509d8bbb69f8a8d61c2ba","sha512":"d7c405a8fe8793fe8330e6aa22b778c63928add231b9822e006b22431bba0cec150630d57d279adaa8ad17a582548ef1c12152054e9fe4ff00dac9e55e6bc84e","ssdeep":"96:eGEtMiqS4OxWHNWG7HZtRi/GfmAwC9DddqwddON5MqbMGqa:efMiqS4OxYNDh1O86weNf6a","tlshash":"8991cd3f36a335318177a27e97efa618313a15432809e8447fbc09821f6052a69f7b9d","size":4413,"data":"","first_seen":"2026-02-27T18:28:22.588986Z","last_seen":"2026-02-27T18:31:37.030959Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da98fe47ec1638d7c68f026bd2a002a8","sha1":"6051f6aa39bb4464e32180cbaf56fcbb3474c49c","sha256":"738f09ce8adeed3b6dcc3e006036c2efbe8b5d28198c38f7f0e8cf9c37d17564","sha512":"a217ab7bd53598ffc931f68b45a17e2d1d5d7633203a8656bd9bdcdc56039ca0ea4be2a4943a2e06972441c2cc82fa8512d724fac8f85be28eb9d4bad8fb585d","ssdeep":"","tlshash":"75319c053ab710f44433009a166f97416634b2377056cca8364ddba8ef92d94aae779c","size":1793,"data":"","first_seen":"2026-02-27T18:20:48.97815Z","last_seen":"2026-02-27T18:33:02.596761Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68e5c22bb883ae3284cac5b602d86b6a","sha1":"de01935ae2e6f4017722deef7dc650629fc4edc5","sha256":"5d46c1f488899b5179c7b0331686266b72403d01372d277653f73c159c7b7f8f","sha512":"c9fd7a51251daf356a2a857f43ac9fdf689d20123c5f15741464f9fffa23a7d3ed61742cd25c7234f0ad4816150459d064ea2876e74a80a3db574f6ff837c335","ssdeep":"","tlshash":"a6c09b483c90b120003710671a3b134cf4a141753904dc2015018b65be740ffd43d9cf","size":131,"data":"","first_seen":"2026-02-27T18:19:54.27145Z","last_seen":"2026-02-27T18:33:02.597457Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c6ab34ddec796551282825a06e3a99f","sha1":"9bcd48b08db701a931b419bdaf4f20d47aa12878","sha256":"1c37617aa05128d6d31c392f62b79350f72f5a8737f3368699cb712eca116fa7","sha512":"bbe68e1de287999f32ac145ae53e2afe86a417981a8a95f5fe5ca996830899022fee4f61a721e67fec62435a71d1a5cbfb8cb9171bc24a3c763231e0b81e3605","ssdeep":"","tlshash":"5581b41facccec2ce5fe5e912ddb360bf0df404786dd98218ebe9a28d81668254255d1","size":3905,"data":"","first_seen":"2026-02-27T18:19:54.276717Z","last_seen":"2026-02-27T18:33:02.598442Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16081ac404ebaf6c917bf509d5d70be7","sha1":"f596e6a5495f46cc0111a6f90943e18ed3216e86","sha256":"67e22166492db43daa00768c63dae58c5218a907be67c7661fc1590b711d2334","sha512":"4afd6c72636535264cc3005f0ad36c4c489370585ccd13dfc82f5165b90821d0a48f7133425ebdf1a2b44ae0b2eaa58945d5c158bb0885cf5725f132072656ec","ssdeep":"96:nG+F5CtdqH8Lc4L260RTO0uBRVQWjYjlY56kXoSdWqWLd:nlFwtdSMczTO0eYjlY56ZS/U","tlshash":"b6916359b1a314b70433e0fa62c377a634b42263f58bcc483b8c43d65fd6c649a26b78","size":4324,"data":"","first_seen":"2026-02-27T18:28:34.989994Z","last_seen":"2026-02-27T18:28:34.989994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/banners-auth/banner_auth_20260224_075206_b007ade9.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/banners-auth/banner_auth_20260224_075206_b007ade9.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lO5fffTkftxQhvs1LLtGxUFUdbPQz1tOkdCBzDeA4oO2yGfWUD%2BLmI%2BWG%2BHeq8jmyaQtpCMH86lwnrkiqXBZJ%2BzuaKqsOSQEzwz1EY1AS53A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd7309eb481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/igamewin/wild-ape.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/igamewin/wild-ape.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: image/avif\r\ncontent-length: 24226\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 01:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68ce0a6c-5ea2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7fOnEEB2926JTuQO9PTIr90RJNk57L3i5jIpPtixh%2BArtpFHu17%2B%2B7GwIw0UHVdtT91QT4biR%2FRID5DFgwCa9qkVkH%2B0sXiaiL%2FR8%2BGUJwO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd738b12481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24226,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"26936b01ef861127cd0288d0e40b8714","sha1":"6a342e88c805421b759a7e6eaf98944aa4cf2e14","sha256":"de289fc708b507cfdd867e0b1dae77873513400f2fd9e3d7e1df63f27871a131","sha512":"8572b44de9c0e93989caef2c217b6c276ca28e4d3958b9b98f907696ee0dc557617ece11496e4054878736d77b0707f54536a54417391c745721d83d5cfa0ef6","ssdeep":"384:z08KmF2fjmg4CnoTi44evBrslaMD5ClmN/DC1lhjbTQUTE+PUrtJP9QDN:XTTlCDmm9DCv5bbT/PydKN","tlshash":"71b2d0b103a18863a0fd0f71013717f52ab18638764e667fbacd9bd1634b5d8e62e294","first_seen":"2025-03-21T08:06:36.392635Z","last_seen":"2026-08-08T07:58:04.648311Z","times_seen":269,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::trvlc-1772216523118-7ea25bd501f3\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 361\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQw0CSuMO1cjTY8zWL26IDD7cbTPOlN2Twrm0uDhye6D5HbxIDbxUjIEtHj%2Br%2BrqXJav7h4C%2BkaacBF%2Bz53m7z3GtWhjNnKctsU8TaS569Mx9A%3D%3D\"}]}\r\ncf-ray: 9d49bd66dfe4aa04-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":36,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.154Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/banners/banner_20260224_075019_42d2228c.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/banners/banner_20260224_075019_42d2228c.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ns9hQSdkxCyPbKi73mTAcoCxFI1YcK0iC8qFG8yWDXZa5Zyv2rEpZqb6z9G7eDp%2Bw8bR8sAQYXQT6DIqTdg9qojtiApD2ZkPiPnUEWZsdsIk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd72583f481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/igamewin/fortune-snake.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/igamewin/fortune-snake.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: image/avif\r\ncontent-length: 21789\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 01:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68ce0a6c-551d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AohXbi5ac3sqjy%2Fs7uTaWxcwh7zoJNrTDOmmmc5pcw7Htm4f0DQxmqKX9ObxSdkN5dqE2mE%2BZntYHdbeDMhvYiQl09gMlj%2BSzy%2B1ZboWb%2BR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd738afe481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21789,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"65aa8076a8c5c0f75bf5cf3143a8a891","sha1":"474d7b2390c8b21625428d492818ce2b1076d645","sha256":"79b46fbcd2ca168ae4b12fb7dd0993a2f34d0ece25a0a7d4ca89fc3b3b85908c","sha512":"d1f21c872aeab40cdf0a49d37593ca0f9cfee794cafca5652257819ecb49a77777cc33cf2173c8eaf63411457f65bdb35e0b9baeea360f65db28038dd2f4cf61","ssdeep":"384:HRi4gqVjyomaHXSIINMDWXvkFeIwI+qAX3zhvx9atEml/RIEM6t5T2ZcEO:xi4plKaHCIS22keI9+qSzhZctEmoc2yf","tlshash":"4ca2f125d15df8bcdbcb8d39518f99a8020516b0cbee2745125a77bce7bb1ee0132760","first_seen":"2025-03-19T17:07:32.469642Z","last_seen":"2026-08-08T07:58:04.764914Z","times_seen":730,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.utdstc.com/icon/369/903/369903d1754537277dc661625a110396f6a799b7c07cb9e4dea3577c6ea78ee0:200","fqdn":"img.utdstc.com","domain":"utdstc.com","tld":"com"},"ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.utdstc.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 12 Feb 2026 07:16:57 GMT","end":"Sat, 14 Mar 2026 07:16:56 GMT"},"fingerprint":{"sha1":"FD:0A:20:93:33:28:F3:F1:56:40:63:13:E6:D2:1B:A6:9F:B0:F2:E2","sha256":"A5:01:49:B7:04:6C:4C:D6:9A:AB:74:47:DB:5D:85:9B:A2:94:DB:DA:22:C1:50:18:FB:07:2A:74:D7:8F:91:8C"}}},"request":{"raw":"GET /icon/369/903/369903d1754537277dc661625a110396f6a799b7c07cb9e4dea3577c6ea78ee0:200 HTTP/1.1\r\nHost: img.utdstc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 26 Feb 2027 02:02:44 GMT\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=31536000\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-type: image/webp\r\naccess-control-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\netag: \"69930db4-3bfe\"\r\nlast-modified: Mon, 16 Feb 2026 12:29:40 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\naccept-ranges: bytes\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\nage: 145522\r\nx-served-by: cache-hel1410029-HEL, cache-hel1410026-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 1\r\nx-timer: S1772216886.399496,VS0,VE1\r\nstrict-transport-security: max-age=300\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2cbe9777d07ceac68b8d1914b80695ad","sha1":"6027bf32845707a8c9cf776cfc535351f8aaaaaf","sha256":"23f83a5a29fc714f19136c4ed2c1b436450561ffec1eb253186bab604aeaf8c5","sha512":"4d7dfdaf5562f150055618886b9679f0628a97b12ef2e0be1393b134c002b20d4b6eca86f766e92c1efb505f73aa4fe2c8418d05cc4575df4fc09bf0c7f127c0","ssdeep":"384:inA0SYRtpX4A/0F+kD+0WK5nwcLtiYOroyaHNdK40:iAopX4A/0lDn5nwcLIpcyaHaB","tlshash":"e162d0866463ef06d36f43952cafc5e2e319de0c5272134ee2d78761582d43f8a5cb8a","first_seen":"2026-02-27T18:19:54.173564Z","last_seen":"2026-02-27T18:33:02.586907Z","times_seen":9,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":52,"dns":0,"connect":27,"send":0,"wait":28,"receive":3,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49bd746bec2767-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49bd746bfb2767-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/branding/20260224075125_ae5a1226e695.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:05.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/branding/20260224075125_ae5a1226e695.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgLSWEuhuFXBF863zPKD07kC%2FzkbVHPPDhGKkFHfHqFKvQIScpiGGwmflvja6an5tFP7RQyZEu2XOM%2FDI%2F9O8KkpRTWSCtAh0Dz0lqPo42rN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd6cea49481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads-manager.sistemasconnect.com/js/kwai-tracker.js?v=2","fqdn":"ads-manager.sistemasconnect.com","domain":"sistemasconnect.com","tld":"com"},"ip":{"addr":"172.67.163.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sistemasconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 10:18:29 GMT","end":"Tue, 28 Apr 2026 11:15:45 GMT"},"fingerprint":{"sha1":"0F:88:D1:39:1A:F4:60:01:1F:35:42:C6:9B:5E:13:CC:E4:53:04:38","sha256":"FD:6D:93:1C:88:E0:7D:09:94:4F:5D:B6:1C:C7:C1:7D:95:FF:EB:1A:8C:1D:41:9C:86:F0:CB:8D:4A:64:22:2B"}}},"request":{"raw":"GET /js/kwai-tracker.js?v=2 HTTP/1.1\r\nHost: ads-manager.sistemasconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 20:59:13 GMT\r\nvary: Accept-Encoding\r\netag: \"69962821-1b3d\"\r\nexpires: Sat, 28 Feb 2026 06:27:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyFmwKHpysVZjP2yEUIKanWVIzz4FQCRJTpbcMaR12SUD11o3ErnCcSHqTdwefERLWx7Ec7jJKx4fLa34FfUJR5lNK4XlnZhWsb6FondliBwQq%2BEzkLhjMZoT63QIsE%3D\"}]}\r\ncf-ray: 9d49bd66dba6b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6973,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cd412994cda522964255dc839adea8b3","sha1":"8ab619d3209733fc909b3322fa6a762fdf14fd6d","sha256":"89ac5bceb6d02b68a87c36be12096504f6fd648e1c3ffa269084e1e2d5b66f20","sha512":"6dc62e70a4614644a81a0b0f26b82d74c45ebcfbc6fd0cfb3510f71888b9a05cce048bdac346c558e1365a74dc3a71e6496890d602562d5a59a4dfd8ad83c412","ssdeep":"192:A96uqObt76mDJi6FCEn5CvBpiO+gjzQtyP:A9wkpD5yUOL","tlshash":"a9e14049a9f7b4050693315c9f4f201a703595573d1ce988be1c4f90af88e2996f2fee","first_seen":"2026-02-27T18:28:22.564338Z","last_seen":"2026-02-27T18:31:37.023251Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":38,"dns":15,"connect":8,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 27 Feb 2026 19:16:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajOE5NRbOuxUbEe13r3c%2BWjCPZk%2FLS7kSYi%2FGF%2FZz0aj%2BhcmlA8jxOh%2BBWvA06BRtMBiJ4oN7n%2BBaFyQZvdGLrljyuJuFdc6YZwqcPi1WasL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d49bd6699f8481e-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T09:53:20.781535Z","times_seen":417988,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/api/system/user/ipfy_auth.php","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"POST /api/system/user/ipfy_auth.php HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=86efcc45cf803f187d75560aad5dd727; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNLo0z20rGNjMGDiau31Yr%2FWt7cdGBCmWEOvqkfDMiI7AOczHi2Q2pcYNJQPvlQVd49sXoOGprAojI%2B7ZJpXTUvMykFO7fU4UIknE8mhj8Dx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd753f70481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f8d2d353a86d3561152e9853e61d62d","sha1":"b189f07cdf4e0b8679adda4b3e3e4f0272dff697","sha256":"db6906aec18a6c3f3b337b0e31c157f45d944132bdc8deac1b9828ac52e6eef9","sha512":"19bb4e35dc93019d4b36ac5910f18249cd4ce36a3ad12f8e4b23d6e5c31a6174c16bc2e4727e188d72e672c120aea283b4e6e6dd276ed23829c7582668f2e33b","ssdeep":"","tlshash":"5e80002a080820a88cc0c080c200ba23c30a8238380830208008300822af0a80220c23","first_seen":"2026-02-27T18:19:54.154557Z","last_seen":"2026-02-27T18:33:02.57939Z","times_seen":9,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/banners/banner_20260224_075028_4711bd1e.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/banners/banner_20260224_075028_4711bd1e.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1t%2BmPiifHx5TbVpPp6dzx33hgBSt3F8rJldLUfB5rmkrl0TZGVgHrjAxsFXZrgqOuo0G0fc3NN3ql%2BKnnljUNCntbAgKy29h3maI%2BkAHYqco\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd72583d481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.493Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1699924\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AN34WlU98HyIeba0o2Korz%2BSUjCr%2B95M5fMgu7REFALjdnVsI%2Fb0hCqPI4wu4EjHOrdXEqNdOZGHSdUO3ams%2FI5GRWq3Rv8CHRDaeDV%2FKuLUqQ%3D%3D\"}]}\r\ncf-ray: 9d49bd66f81baa04-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-11T09:52:34.847125Z","times_seen":48791,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/branding/20260224075125_cb00d80bb165.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/branding/20260224075125_cb00d80bb165.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0suh4vAl1pJ%2B%2FFm0DL7eZ0yOkfIiRJ1GtGjdSaV4jukpKr9ay6s6xLrAlJ03rlZ9v%2FAshpXPRpzQ717l1EyL1kSb%2BSJYrhg7uKIj8MgGM0Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd69180c481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/api/system/user/ipfy_auth.php","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"POST /api/system/user/ipfy_auth.php HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=bf91728d4ff56f6211affd03a1ade4a3; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqXburKL%2FL5plTV9Jj5vp1AoquTeJYDQ3F9Z42spSbCDBQ83ASRdqa50eViJfy1Qp%2BAvYDsEprySOWPyBte4SnLEo6MG3y2v9osHMG%2B0ptn4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd753f7b481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f8d2d353a86d3561152e9853e61d62d","sha1":"b189f07cdf4e0b8679adda4b3e3e4f0272dff697","sha256":"db6906aec18a6c3f3b337b0e31c157f45d944132bdc8deac1b9828ac52e6eef9","sha512":"19bb4e35dc93019d4b36ac5910f18249cd4ce36a3ad12f8e4b23d6e5c31a6174c16bc2e4727e188d72e672c120aea283b4e6e6dd276ed23829c7582668f2e33b","ssdeep":"","tlshash":"5e80002a080820a88cc0c080c200ba23c30a8238380830208008300822af0a80220c23","first_seen":"2026-02-27T18:19:54.154557Z","last_seen":"2026-02-27T18:33:02.57939Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/banners/banner_20260224_075002_6e8bac8e.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:08.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/banners/banner_20260224_075002_6e8bac8e.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183; PHPSESSID=bf91728d4ff56f6211affd03a1ade4a3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYphqsbMCripb%2F93KecUKNpprX87lyAEyvfejlxDYJS4bFxDx27rOa0iqwFV1NRCbjggQomqexfw6XewcTx%2BfVeTrwN6afN%2FHsE3n5hB7xhC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd8308e5481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.575.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@0.575.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d49bd680eedc272-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 712948\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Feb 2027 18:28:04 GMT\r\nlast-modified: Thu, 19 Feb 2026 12:24:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8BVXy+/tHBRhbAuCI4PHS/I0wiLM9GmMiwC0nVADDiY=:\r\nfly-request-id: 01KHTXNVJSDP3DHKM4Y4CXBCZE-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":392129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"7e93d3434587cb410db274e4f2d8976e","sha1":"4ad59c32e25887497f1819c8e42fa47e46421db7","sha256":"f01557cbefed1c14616c0b822383c74bf234c222ccf4698c8b00b49d50030e26","sha512":"4028a8993d7faab9ef09569c9af0956004c9815efaa2bfbf02401478f591c4959796e513ba0e1d8b9f11aae786688a63923f9e2c822e51424bbf655620ab9934","ssdeep":"3072:hcIl2IQWkHpsHqBKdxKuo681z3fsjHhmTPO4Ljbq5jUkm6WXrEHbiePVFtSAjpKN:2EQaH814m6EElPDoAAR5a2B","tlshash":"0d8463af8fcd269f4c56e7881a4bb0111fed93bd331a8c12768e963bc252416dcb3651","first_seen":"2026-02-19T12:32:30.318976Z","last_seen":"2026-06-28T05:45:16.370708Z","times_seen":716,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/system/games/btn_star_off_2.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:05.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/system/games/btn_star_off_2.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:05 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1036\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 07:34:06 GMT\r\nvary: Accept-Encoding\r\netag: \"69197e6e-40c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSze5wIdP5ZqfDmndBy4v5pwqNc2tGwH48N9ohFlT1P4XJ6yfsmvl35EwK72P0XaDxui32wc7KeEtJm8aYqPfhBekvyYPZ%2BtjgbNnS1K%2Fwb1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd6f386f481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f9b6a776dcb8e53a1e22c1c1a7db2b1e","sha1":"52638a0c4fef4928975943596e67228a2b068de9","sha256":"12f53b8b3a8f1b20e8e5ed3d3f5edfde34f5859d49d0055950828630f26d2695","sha512":"ecab7d9479debfd6e786e1296326066784b626ba9dc78678ba1cfec7d72a24e875c353f334c7262b99559dba8198286be93921f685fa2b8a2876bc42f34c9fad","ssdeep":"","tlshash":"7611509043a42922e86b03760dc9d6125b34aea2a3f374cad84077285a3d1fedb2de14","first_seen":"2024-08-16T09:56:55Z","last_seen":"2026-08-11T08:34:09.464024Z","times_seen":17506,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/api/system/user/ipfy.php","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"POST /api/system/user/ipfy.php HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183; PHPSESSID=bf91728d4ff56f6211affd03a1ade4a3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyK6Ocwyo4OLcjAU%2FxFTPfpfSSWSIgIc0EUQCm7ocyrbQYv38Tnv5HxhNaVsx6NBz7Tk5BIIc%2FvbAERHXMDw8xS5FXIBqA0aMVlpaClrsJJb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd772bec481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2a52097d7f03606103253314c4ca024","sha1":"36cc882ab0dfe9f43bfbad3d4250951a80b7a2f9","sha256":"38667e60226bf99701916900a2a265233dcc014e1206c173ade921d608824b53","sha512":"cf6526aca8465b7bcc7c419960796aa7dc5c742c0d43ec7f77a7b9e1450f675f98cba4d47807f2754208faf58be4463e54812618f31afc2553244135a43bb3ab","ssdeep":"","tlshash":"43600000000c0c0c00c000000300f300000300003c0c3000c000300033c300c0000c00","first_seen":"2023-04-10T00:36:02Z","last_seen":"2026-08-11T08:25:09.002034Z","times_seen":515,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T18:28:03.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: vid=15e32e06-907a-4394-a12e-88de25f4d183; expires=Sun, 27-Feb-2028 18:28:03 GMT; path=/; SameSite=Lax; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U142%2FQPWN5A0Qqp7KrawPgV7ljPcCWjgR3vSVqywCYG83G%2BnlIBY1sBKBGnWM3i5KnXCY9CVOGuPwbDAzR1cCQ9O%2FiQrRUTMFVnCt1VFlCmU\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd63cdc7adee-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":311026,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (863)","md5":"a43ea78d53f463a3cbe068dafeaee920","sha1":"8c5133ed9a402185eedec61e7e6800db31773b6c","sha256":"f0a0efff71fd730a3e8339846acd33e3a843b832242661cc6f2e835fce1b5dcc","sha512":"83073867f14f3cca7d75fed52a22ed7c5267ddc4aa5b1482aca54156fa36e151f9cec29aff7120b6b5f68ae2f462367a8d471be45bf993a7c7c890434fe34928","ssdeep":"1536:Kc1+QJFxI8I6++54sxR798uNgGTc+SJiUxjjT7oQMetytGo5fcCbBZjjT7oQMet2:Kc1TRQFiaNlGmPkIRV3nQXu","tlshash":"636409a5b1f251fa5053e3a02fa75a2a39299493dd0bc64c7bdc06a45fc7ccd8823ed4","first_seen":"2026-02-27T18:28:34.967895Z","last_seen":"2026-02-27T18:28:34.967895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":39,"dns":9,"connect":8,"send":0,"wait":233,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49bd72898c2767-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":29,"dns":0,"connect":8,"send":0,"wait":106,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/igamewin/fortune-dragon.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/igamewin/fortune-dragon.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16220\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 01:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68ce0a6c-3f5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmSJyIE3JcN5lK2Y5GpT6zNjL5Kd7t18n0URtpw0fRMnGFcRWTTLHadNt7FtYND2fv31xMEgkT%2FTLWn3rOY0EoZedTqEs9fSotDlIBFtAQp%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd738b08481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"52e17d0fc450a75c9b5d031ddca5653a","sha1":"93f4cdda94e9ba02b08bc300752d5a8e42c861f4","sha256":"ed0de8ed82f1fc89f6eccfbd6e741680e4cc62328fed2c11b1f9d6451e69f37f","sha512":"a9ff37731a867200a595d664b1da30011db828769105a6d524fcd4815447ccd30295cb4121e5b99e920f8ea76b34932c37518c8f98e25b2c55b516e49de98df9","ssdeep":"384:wqGivA+O3bUGqZc/NArnn4zLhB9h4IwIoNK2R9pknX/8yJGjM1eR4f:yQOVqOuT4/9hnwImK2lOvkjMt","tlshash":"f272d073c3816caae41b457281ce551b4dca99049baf3e248f3c39717eee576611063b","first_seen":"2024-08-22T23:03:43Z","last_seen":"2026-08-09T05:01:31.333117Z","times_seen":789,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/igamewin/fortune-ox.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/igamewin/fortune-ox.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13789\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 01:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68ce0a6c-35dd\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9h%2FypjQnjJ%2Fw%2BLs9qULUcuLykT%2B4jH1PrcG4glaT00fChODQpsHA5K8T6fVmpwWmydi6CNC8P%2BBaAKERrOAisYRMggcjhUc4hhbZdvV84Q1y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd738b0f481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13789,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fb341b0d27383a57252c3fa963361571","sha1":"5430b57e39d5ae7154cc57b375fa531c444d39b3","sha256":"736c419c55913744a1ab7bb03980e433debf8b9b8dd608bc00bf5ec0bcd7bb41","sha512":"cb65461c4a410b7ed5b122491e4d7a72cbdebf3c0fb7c386f13e40497e9f4cdbf911ccae024653bd5c56b5de1d289331899a1e711a9cfda19831f6cfbf641ed4","ssdeep":"384:NkJwlBmWkUQfxM4hgqLmaCxGv9e/omkolu7+E6eXOad0:aw6ZM4vrgGBolm6kv0","tlshash":"4352c0ded3e51f10d8b11d7903d7ef1732b665d36f237384c4d513941280b6a9a24a5c","first_seen":"2024-08-22T23:03:44Z","last_seen":"2026-08-09T05:01:31.232717Z","times_seen":849,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/includes/ipfy.js","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /includes/ipfy.js HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Dec 2025 12:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69414b4e-916\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ashhvzO5CpIUGjwZlYRNM%2BF5j90BJTDMbOfW1xspj1c52gbDPz94awkPShgUjaduZsVqtqnxPr0ECyA%2FTOkTqNPBVs3kaVLdaLLFlf0P2XfR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd6699f9481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abbacedb349c8e3cf5df807783039997","sha1":"9eb553ba32cf159c4e6141fa56ddf32c0f7e76d2","sha256":"f044218065aa71eecfddfdef69a1f039c3b2c32ce4e7ac1f2474d3810c6c72fa","sha512":"b1798206212b4cc55e321c961820a40ef889010d78a545eede9536bbee3a3c17d7c0cac252580642cd32debe6d4cad37da57cb4077cab8dec622d820eeebc75a","ssdeep":"","tlshash":"a941dae922f7606e0a63206c1bebc10b6727d40b3b89c5587e9c71022f8527987f1bc8","first_seen":"2026-02-27T18:19:54.208801Z","last_seen":"2026-02-27T18:33:02.58015Z","times_seen":9,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/components/auth/ipfy.js","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /components/auth/ipfy.js HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Dec 2025 12:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69414ed2-c82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=27GNaFiuPp1AzHiXWkB2Z55gtoh8pEb0Vli04jO9%2FP0Yr%2FwuuLLpRy6gLvJtal%2FDEOMQ04SgMEfdEniQvWXRdm44rqWb1SMU8SYxlsrn2Von\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd6699f3481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55180ff80f60751ef370c33eea6fea07","sha1":"ff3e1c62009001e0505ab8cf455797facbfb9847","sha256":"748100143447e57f7877407233e91a2baa841f30231d7838bc346ab2db17ee2c","sha512":"489af5c4f0264269bf0adc6923cd33c4fbf0f3d2a9e2c4f57e173b2e0ed728d3bb380aee1e93611a790faafa7b865f6df6e24e0ab3c4538e680b7484b7467562","ssdeep":"","tlshash":"ee61dcaa38f72535025371b90aaf92457132a4077689cd997a5c82103f5423a9bf2fcc","first_seen":"2026-02-27T18:19:54.201015Z","last_seen":"2026-02-27T18:33:02.551136Z","times_seen":9,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/igamewin/ganesha-gold.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/igamewin/ganesha-gold.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16220\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 01:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68ce0a6c-3f5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhXelRBTA8jUn%2BU1kWTvSB6buKznPffo8%2BuG%2FcP9oVprcchRdjqDUg7TpLVvNL5bO4PbIY0f6m8TjKKHPrlQu80A4JfQBwI8FN9NuGnbrevM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd738b16481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"42e5bcb0f76e21b6743e2050f4899d83","sha1":"93b5eba8e30d1ae699553e0035da5c343e070085","sha256":"c7e359923ba5672e26c8c8c7ea2fc5e8a9a57b58cb4a0c26ea8e636fbb30ec19","sha512":"d19a56bc762b6343fe9a2d85df8be009248f7f1191594d8bba49cf47a0354f09b65e078ddac9373661726578915def72da04693671b981ca1ef503fe711b2a05","ssdeep":"384:AfG0QSd+7bMOH061gVPrLL8EarfePSUjnQLrSV4Mi1BE9N0y5:AfGPbMpJrMEarf0arSV4Mi1M35","tlshash":"c572c099bca93df0c1baf7bae96382334640226d49c3117df880277919b4ef94019e75","first_seen":"2024-12-01T15:43:36.228242Z","last_seen":"2026-08-03T10:46:11.213959Z","times_seen":331,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/igamewin/fortune-rabbit.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/igamewin/fortune-rabbit.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11181\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 01:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68ce0a6c-2bad\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyX7fl1v%2FA7K0CVCqGVYTZl%2BgjuJDi%2BGLrCzO%2FZM0wSryy1VI7gJPQXg9bEdRYK9vvR9qoyNV5brV1t9l0c6ybrC2y2CUfrlJKp3HHi%2F2X3F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd738b17481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11181,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7843cba1234991b9e069d65f9bb63e95","sha1":"6103e667da7e3ce1e3b1d437890b45e4fa199931","sha256":"c03e4edb9e1979b0bd8460529c7ffbca96401634bd258cedbf98dac4bcb95cf2","sha512":"bc7b82b4e967fce8b78f5dd958eecac6c137dfce2905a135ae917af9d85b9975bb6d6b7aab81dd32912680b89978bd58ba12131b37c403c0253d9092de278144","ssdeep":"192:+GTUEhAhkycltD4gcN5EKcbcZhesYjkMBt8TZoSGT2FyozYgMc86:9rAhQlTjMhedjkct8No/TayhgMcz","tlshash":"b532c013038c7dafc552c0f705cf199a769b49805ba176fbd191b7a1826cdf60f80c62","first_seen":"2024-08-22T23:03:43Z","last_seen":"2026-08-09T06:13:31.712801Z","times_seen":886,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.500Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9d49bd66bbed49c5-OSL\r\nlocation: /lucide@0.575.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":174,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/branding/20260224075125_cb00d80bb165.png","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/branding/20260224075125_cb00d80bb165.png HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMwQ9KqL7fB9AkeWjPNeqk6AXzHhm%2FLAxOa7KYOGTORAuLHTSIRzRQII%2FmMJUiW7dggLCejDZyQA8fjbqhON%2FkykMYeABjeMVhPQEm6vG3eQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49bd6699db481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixdasortefun.fun/uploads/jackpots/jackpot_1.avif","fqdn":"pixdasortefun.fun","domain":"pixdasortefun.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:04.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixdasortefun.fun","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 03:51:32 GMT","end":"Tue, 26 May 2026 03:51:31 GMT"},"fingerprint":{"sha1":"3C:08:D1:D1:09:AF:AC:E0:AF:91:C4:92:E7:0A:9A:27:D6:10:E2:19","sha256":"06:FE:96:7F:C9:51:79:F2:4E:BC:67:B5:32:38:AD:95:D5:AB:B7:2B:95:B0:1B:04:E3:9A:7D:52:ED:46:6C:BF"}}},"request":{"raw":"GET /uploads/jackpots/jackpot_1.avif HTTP/1.1\r\nHost: pixdasortefun.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pixdasortefun.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vid=15e32e06-907a-4394-a12e-88de25f4d183\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:28:04 GMT\r\ncontent-type: image/avif\r\ncontent-length: 40349\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 20:51:30 GMT\r\nvary: Accept-Encoding\r\netag: \"690915d2-9d9d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80hzc5uj5fb6e%2Bzfpgqq9LR7SS%2BBYUfkZ8e7TaSCb7YIDQYbzdJeC2KEvmm1es7RPUdzEWv1WNRtsyhj0T5XnnSLA1s4%2F%2F2M0%2BzC%2BQXDHfdN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bd6699f6481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40349,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b8976eaf303c9a738808a56aa8d83f4c","sha1":"c1d9ab55c68f5686438454f109aad509ff1affe6","sha256":"135fcc1d847100e5863f049683d1c4e92abedfc47889461fd203515ace84ae69","sha512":"41498e104ea822e3fdfa9451e1e62101b6ba2ce7eb14fc23a1fe55d2b29e74a329945def27cc07b493af9882c163f0ec61ca51a217b329ec448a643e3e897467","ssdeep":"768:LHXMk7h7MikBrkbvfzc3kU8X0yW97RJyqD9x6HdvGYP:LcOWiYkz7AV97RJRD9x6HdvLP","tlshash":"070301bebf6dd3a0d26f91392ddb0dd69a6cb2341342ffe83511d4996a531298f62003","first_seen":"2024-08-16T09:56:56Z","last_seen":"2026-08-09T04:14:12.497297Z","times_seen":718,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"pixdasortefun.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/?format=json","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixdasortefun.fun/","date":"2026-02-27T18:28:06.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Sun, 07 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:FB:D7:A6:46:74:41:70:1B:A4:47:72:CE:46:DD:ED:B9:6E:58:0F","sha256":"65:A6:3B:17:C5:1E:19:D8:09:8A:AC:AB:C5:CE:0D:B2:4A:06:47:FE:31:29:AE:DF:7D:4F:A1:83:07:B8:E0:C8"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pixdasortefun.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 18:28:06 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":1337,"timings":{"blocked":592,"dns":1,"connect":403,"send":0,"wait":151,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}