{"report_id":"984cae0b-3fb8-4902-a479-69b9b1586397","version":0,"status":"done","tags":[],"date":"2026-09-09T19:32:36Z","url":{"schema":"http","addr":"glossy-expanse.com/","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"glossy-expanse.com/","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"title":"glossy-expanse.com/","dom":{"size":4244,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2993)","md5":"5455733d06f1518bcc9373ede2ddadac","sha1":"62a32df9e9a48b68e964393c2d989ea9e58a76e7","sha256":"f81cda0cb7a0d533948caf36b1adcad779435affce783edeff27c2c05b30b2aa","sha512":"36b309e2f968bf392610a444dff9faeb1183fc890758efd63d63284026537daa432ee5e47d2931705dfb1d9007eae720487f3ab97bb48d0ce2f050822401be69","ssdeep":"96:sT4wh5ZkaUJ2ETWo1ab7XNowuEKy0waZNz2UWA:sT4wh5ZkaJu4b7DKLwaZ52a","tlshash":"c991a5683a14955fd12227a17d86b44d1ac5b71ec25d9cb0a3ef93fe0dd0ec88952817","dom_hash":"domhash7396d5dcf8937e20df8e941d58f6855b","first_seen":"2026-09-09T19:32:38.127288Z","last_seen":"2026-09-09T19:32:38.127288Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"glossy-expanse.com/","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:32:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"glossy-expanse.com","ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-22","domain_rank":0,"first_seen":"2026-04-18T19:50:13.233367Z","last_seen":"2026-06-14T13:08:20.363028Z","alert_count":65,"request_count":13,"received_data":332947,"sent_data":6971,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/useAsyncPageView-Cb8uJyC_.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"879b2652dfa958b2c75951b00a4e505b","sha1":"30970cb4feb77e90532760e8a188e1688aa9146a","sha256":"6974c99b4065682ccc547b516eb5c79dd91849622b204fee9ac4543a21a2d377","sha512":"73712c64c45d5ca13089cb51817d0e8146868febe14891e5fe727e2f05869d7316729f90fdb6ed620d813d84e5007cda728cb679d7a4d0f37f61ebc147b57b24","ssdeep":"384:GYAHe2JOYp2yGEMIhQsqS2V5XvUGjOkzL1RuAg:GY+J8s5rZhQsqSifUGbng","tlshash":"9892d98e9a441bfeb38d4ff43a43255a20f49e4196ac453bdb056cff3538464823d99e","size":20553,"data":"","first_seen":"2026-06-25T19:45:04.578036Z","last_seen":"2026-09-09T19:32:38.151726Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/vendor-CaoMcDoP.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"802328f09ef0783b0d5efb88522cbd75","sha1":"5eb59b2ad449f990f18fbbe0f54dbba9214b3157","sha256":"f5c0d7df3136feeaccc8d3a35b4e1e1f6740364fed66d7e5a7e5473adf7ae997","sha512":"2430cdc4b96b504903d60de207cc78cf1fdb051f4d4f43dc8148a3b0df0b2f8c21bc6e83c133e656440dd6671d47931d6d735278cdfc2042cfed80721b873b63","ssdeep":"1536:pnzwz9dwEO6DtCmZuVIEZaaGj3K9ZHed9:N28nZaaG+9Ud9","tlshash":"f19307e53192b56293ea0ce240770006f3692816384ec9d8f5acedef3a7644551bbfbd","size":94703,"data":"","first_seen":"2026-04-22T10:52:38.430699Z","last_seen":"2026-09-09T19:32:38.150761Z","times_seen":1073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/6Ccny97m.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b2cee3864c028d0443b2040b3fcd423","sha1":"8c957c51dd8589c87b18fb02db8346d03d17546a","sha256":"186af7895e9e9866016a6c7d0c14773bdb57a84131ec8dc179ad00c29261d416","sha512":"7103ef8e01c7d3e042b1c31eb6668893f73b23af330fc6c2a1c9b5fd300ff566cc25b0eb21d6484f24b1448d6d427fa2fe22db4c81b733656d5be33c0e8dc57d","ssdeep":"6144:HRt58HXYkS1rZ3JlSbF5SQxPoffbZTXF3ft17CKgs9US94:LAX/SFlSbLSYQXISK","tlshash":"971449d536a2f47107fa05e0a07b1146f2745d24345ec0a1f2acadfb2da6c4a916bfbc","size":199338,"data":"","first_seen":"2026-06-25T19:45:04.55813Z","last_seen":"2026-09-09T19:32:38.149811Z","times_seen":524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/ssrError-BuQUWvMf.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecb2a50ab5225315e4e2c390cc380089","sha1":"f66abe1b8b1cf009a1597df76bf505d820042fd7","sha256":"dd2210f66003c7d35be6a10eead90ff0e052b48bdc23aef65de4bb1ad117ad45","sha512":"358e34a9f739ae7e0f61b0b72d96e8ea0be84ea3ff583ca80b4bcd652114ae387489bbbec2b5206fde6dcf83a35a7135080e925c7f48b063b51117ad2f7c3169","ssdeep":"","tlshash":"b6b012037440d0f242880ce5c310c08100109b5423d168d040ce3b19164105dc40eb01","size":102,"data":"","first_seen":"2026-06-25T19:45:04.565064Z","last_seen":"2026-09-09T19:32:38.145705Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/useCategory-CfV3IWxL.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f793959842e4a95b915553c5f177db8","sha1":"31d27a1f00f7a421279a562d7f8d0b3d1ca3a5aa","sha256":"00c9e8f1f5e39c8cf3f1f1f0f933c3b9a44483bf8b42162e11634a55a3594316","sha512":"d5974fb4b6f3426f045fbf598b53af7641010d909b1c8b24662459d03903040aada22c65a6018221ab923b4f6fe897f38a322939558379b3d1a06f352f303352","ssdeep":"","tlshash":"50b0124d1044d0f1010046bd4002581ea354c984535d1dd0924289c21b150d5823ee21","size":91,"data":"","first_seen":"2026-06-25T19:45:04.561486Z","last_seen":"2026-09-09T19:32:38.15366Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"054ca11bcdaa1b72dcadfb434c00d188","sha1":"2d25974e00f8906e0959c27708c404ab6a056a12","sha256":"1fd20d1351f7a3da74e64bf943d7a5e56a8bb7a5f8ed2e300efe8b22321af558","sha512":"748f56d0aea65ee512e286002f3b3b0b954e95493178336cc88fb66d9096e35d6025ca300a2831270365346f0822fd63eaec7db9e2e4a10b37b6af63f490820d","ssdeep":"","tlshash":"85d02350633fe43504f40d1b7dd59f1653805575411f97d421a2c11d0c5b61f71d5382","size":209,"data":"","first_seen":"2026-06-25T19:45:04.596748Z","last_seen":"2026-09-09T19:32:38.155409Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/empty-DM5gXrPc.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d82350507adb31d118f7c39d44e2b8","sha1":"b96d729c17747a6ebc5ee05c3d2a03dbff54ed2f","sha256":"bf84c654783f6f7197eb5d3d7b6a25beff0f636fdf2254bf2b119f84eff2f5c1","sha512":"4ee3f5f424584cfcd632ea1525ecb6fd7ac66ceff2f905efd91a17a7c9e32bf8e0afeecbe06bb3a5ae487d49d12f21ffb43cbeec703bf7ce16434b7fa0661280","ssdeep":"","tlshash":"41e02d0ff401e8fe413688fad02e28202a00045f43f461e0c3dcbb18b354847cdae608","size":346,"data":"","first_seen":"2026-06-25T19:45:04.594032Z","last_seen":"2026-09-09T19:32:38.154527Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/useLocale-_xIyerGC.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5e5a677f5b58c30a331596bf8f407c","sha1":"730c7e20d150e8eb83d083e53320c1e9be75c202","sha256":"00fd6d6e785a245fe3bb77e4e994bbd02f829731baf886ddbed4c1554d738e7c","sha512":"85dbdf52e1c4bab4f1c0d51e553cd06dcd1fafdf6a8ca153ba8dc3c493e935925f3c03323e8ec86d068367c79a5daf29ba054b6eff4fe74b6310daf8043a23a8","ssdeep":"","tlshash":"38f0279d3083b079032544f4d5be202003298b9852996ed5a14f058a6b65c6cc39ae2f","size":493,"data":"","first_seen":"2026-06-25T19:45:04.591677Z","last_seen":"2026-09-09T19:32:38.152702Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/index-A2FblqlH.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60136fae88f948ddcf9cd878f936e9e8","sha1":"0ee3c03073e9a45157ed30a92c70471ff1b69d36","sha256":"7287415f1722a1f1bec115343804dd3fa9edb7aaf615c18dd97e7fc5963d7ca8","sha512":"a90f865ce7e03f6e7e368057d2129ce147c235bc242fc9bf850ae8c25c77fd9d73e8e4fd7e8524dd59e0aef92484219af07124ea3bffc4699681ec7e898c6eaa","ssdeep":"","tlshash":"33e061def61691f6817e9ce5e604143153140aaa17f65bd0c59d57312e524c6c40fb26","size":434,"data":"","first_seen":"2026-06-25T19:45:04.576385Z","last_seen":"2026-09-09T19:32:38.144217Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"glossy-expanse.com/favicon.ico","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:07.268Z","timestamp":1788982327268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://glossy-expanse.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:07 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: OPTIONS,GET,HEAD\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 09 Sep 2026 19:32:07 GMT\r\ncache-control: max-age=120\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1ISQ%2BaN0fdPy19pGmTWwiVAwCVG4SHh8LNiWR555CNXJ9I2xCAuxj1189A7ZsF%2BnTpAdPIORv4ML6KID2M08GJS16T8zIoKUcVWAMmXmBDiPP%2F86KfAcg556oLsnNfty9aXjjU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3889df97b2d6ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78,"size_decoded":920,"mime_type":"image/x-icon","magic":"ASCII text, with no line terminators","md5":"b9a31d3949b1882a09ed2f8508d538f3","sha1":"1c4fb4a004ac374ae735c210f8560be0dce354ac","sha256":"560a481d94b94be28e45a6ee498682f92b2eb99f8f6f5956c9aad969f61ee5e5","sha512":"2f13bac82a699ecd16af4049fa8c5f35ff85b736025f576ca5a8a690c561e4803d85578fe449b18a95cfca2791200a3a6ebb9602d7d12219975bedb48360e1ee","ssdeep":"","tlshash":"18a002f215eb78c74d4d2c20d44d93559d49085fd27587d0dc6603664ad5845a57e438","first_seen":"2023-05-08T15:22:04Z","last_seen":"2026-09-09T19:32:38.136337Z","times_seen":7360,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":642,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/builds/meta/a1f4a026-9f9d-4919-a2d2-9fe3c9215318.json","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:09.593Z","timestamp":1788982329593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/builds/meta/a1f4a026-9f9d-4919-a2d2-9fe3c9215318.json HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://glossy-expanse.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:09 GMT\r\ncontent-type: application/json\r\netag: W/\"58-61c7EXTJwklEhH7F9kgKw2hOhTY\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKpu%2FTN6eMYKmI0H3NDhYReg64%2B05sKYzHdYlpJFezVGyBBfZ%2Bykvo6%2FBwEMj1yMHFGKvwaR4egsN%2FHy1rUKZRlWtQnygjtLyLC%2Flm1XcO1rtBDELZttoek4v%2B9QnEC1yTrfLCs%3D\"}]}\r\ncf-ray: a3889e080c206ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":1040,"mime_type":"application/json","magic":"JSON text data","md5":"c5ddb2691ebde92a26966f4ff00ba5cb","sha1":"eb573b1174c9c24944847ec5f6480ac3684e8536","sha256":"07fa3dbe76d50be119c5a56c178b2a145f8cbb1b138250831c1cbdba7ba2369c","sha512":"5d23d67b3a408e9d1e86e6fd52a91895bf2a4c2329e8eb23447718950cdf15b8f891dfc50f21da2264729de86b396a89c2036b106a55910f2d1251f7860d292d","ssdeep":"","tlshash":"88b0121103145408441820738d50cc6540495e43054e8d2e26044a2e043820f7a7ea03","first_seen":"2026-06-25T19:45:04.595618Z","last_seen":"2026-09-09T19:32:38.13829Z","times_seen":502,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:32:02.954Z","timestamp":1788982322954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-methods: OPTIONS,GET,HEAD\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\nset-cookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21; Path=/; Expires=Thu, 09 Sep 2027 19:32:03 GMT\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6F4m%2F0mRYmCb12FTHROqeRtLFIxdvh1HYyur5QWnnr%2FXXYGJjjvoZoNoisVK4MB0hzePDKz%2Fk6pP3DGDWBSAWhOt5PiqQFeDu13McuyOe53hE146nLJoq39sJ835dqIpG9x6BQ%3D\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a3889ddf69a26ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"surfer_uuid","value":"5033f5c1-4338-4d7d-a9a1-eace01ff7c21","quoted":false,"path":"/","expires":"2027-09-09T19:32:03Z","raw_expires":"Thu, 09 Sep 2027 19:32:03 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21; Path=/; Expires=Thu, 09 Sep 2027 19:32:03 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":4117,"size_decoded":2900,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2880)","md5":"0ca759ed1e0417d8fd5d6820e6bba776","sha1":"654be74eb1bbc61e13995f9e8463c08ef8d8a940","sha256":"e0f7f5c7741b7ee6514c4a8cb087cc7a4b2e3ccd167547ad102561bc711db6c6","sha512":"57f6e8779593a02cb79f625f3f0584ba05149154a2d739ee58e80b59682e916f8fb069c1b70ca59a4335739ff5cb64f2bbc847e63c78192c5da4814d3c589eac","ssdeep":"96:guiwA5akNJ2ETWo1ab7XNowuEKy0waZNz2UWA:guiwA5akCu4b7DKLwaZ52a","tlshash":"6d81b5783a14995fd02127b57d9af08d0ad9b71ac25d9ca0a3ef92fe0dc0fc88a52417","first_seen":"2026-09-09T19:32:38.139783Z","last_seen":"2026-09-09T19:32:38.139783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":0,"dns":111,"connect":30,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/entry.DVIo1EG1.css","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.983Z","timestamp":1788982323983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/entry.DVIo1EG1.css HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30wWR%2BtAIW%2B0csU1n4hBYJv7hdpZF1JxIYjnW8hRLd9NURG8Ek1LRqVCkr3qmxh5U6VPRcuGB1rfbZldr2e3ADWhQDeO5pVqofZX0glag5pGBurfmyITiaA4CaaZ3OnK8TTclZM%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"8c-M4FJxkKyMRmtARLRgJKFCgKaN54\"\r\ncf-ray: a3889de4fa066ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140,"size_decoded":1062,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8c244eeac0b00e9d0ec403d943ab7e64","sha1":"338149c642b23119ad0112d18092850a029a379e","sha256":"f6ebc7de13372e04230c73d3a23e1dd6ba5f0c843bc4d9cfc78056040dd79412","sha512":"00072ba1d2504f8163df4fbfc57f1c42ce3564ce8eb22cf1042aec86b219bd630d9ea8a8d964e3b719d9f58b50df0145089f84cebef19b68dee7f2956bcba014","ssdeep":"","tlshash":"60c02b313501008a0533c6322fd02b0b3a5098b28b0bf14b40020312decf7c8ffb1302","first_seen":"2024-05-25T19:22:57Z","last_seen":"2026-09-09T19:32:38.14277Z","times_seen":4944,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/index-A2FblqlH.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.988Z","timestamp":1788982323988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/index-A2FblqlH.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BbvZd9bbHqVWII91Kyijh0i8SzjZZKXMotEVZdlBydqctOmxz61DLCVengyOjPoZAQO769tq2hVZ8yOxamHwq7iilX7HwiFajBy%2FLWQDYzpTppN8HgTe4PshWcb9PgnwIRJAlo%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1b2-DuPAMHPppFFX7TCpLHBHH/G2nTY\"\r\ncf-ray: a3889de4fa0a6ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434,"size_decoded":1260,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (433)","md5":"60136fae88f948ddcf9cd878f936e9e8","sha1":"0ee3c03073e9a45157ed30a92c70471ff1b69d36","sha256":"7287415f1722a1f1bec115343804dd3fa9edb7aaf615c18dd97e7fc5963d7ca8","sha512":"a90f865ce7e03f6e7e368057d2129ce147c235bc242fc9bf850ae8c25c77fd9d73e8e4fd7e8524dd59e0aef92484219af07124ea3bffc4699681ec7e898c6eaa","ssdeep":"","tlshash":"33e061def61691f6817e9ce5e604143153140aaa17f65bd0c59d57312e524c6c40fb26","first_seen":"2026-06-25T19:45:04.576385Z","last_seen":"2026-09-09T19:32:38.144217Z","times_seen":518,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/ssrError-BuQUWvMf.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:08.281Z","timestamp":1788982328281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/ssrError-BuQUWvMf.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://glossy-expanse.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13lquJLNmEHObTctKtjQeqeWQI2fF40xevZfwQNBjFN263HVRD3e5%2FpM3YJ9PPhgrWXlMR8NBhECvuw1aLKzeb2FsX8NraRWEFo6hKFjhWySg8cSACmKZK69fWVkGRViTucFTUw%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"66-9mq+G4sc8AmhWX33a/UF2CAEL9c\"\r\ncf-ray: a3889dffdb796ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102,"size_decoded":1054,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"ecb2a50ab5225315e4e2c390cc380089","sha1":"f66abe1b8b1cf009a1597df76bf505d820042fd7","sha256":"dd2210f66003c7d35be6a10eead90ff0e052b48bdc23aef65de4bb1ad117ad45","sha512":"358e34a9f739ae7e0f61b0b72d96e8ea0be84ea3ff583ca80b4bcd652114ae387489bbbec2b5206fde6dcf83a35a7135080e925c7f48b063b51117ad2f7c3169","ssdeep":"","tlshash":"b6b012037440d0f242880ce5c310c08100109b5423d168d040ce3b19164105dc40eb01","first_seen":"2026-06-25T19:45:04.565064Z","last_seen":"2026-09-09T19:32:38.145705Z","times_seen":505,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/.events/v2/page_view?stream_uuid=00000000-0000-0000-0000-000000000000\u0026googleIdTh=5033f5c1-4338-4d7d-a9a1-eace01ff7c21","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:08.541Z","timestamp":1788982328541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"POST /.events/v2/page_view?stream_uuid=00000000-0000-0000-0000-000000000000\u0026googleIdTh=5033f5c1-4338-4d7d-a9a1-eace01ff7c21 HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://glossy-expanse.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 568\r\nOrigin: https://glossy-expanse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":568,"data":"{\"subscribe_owner_stream_uuid\":\"00000000-0000-0000-0000-000000000000\",\"stream_uuid\":\"00000000-0000-0000-0000-000000000000\",\"surfer_uuid\":\"5033f5c1-4338-4d7d-a9a1-eace01ff7c21\",\"visit_uuid\":\"33e91df3-0957-4612-af90-488469d807c2\",\"is_first_visit\":true,\"is_unique_surfer\":true,\"is_unique_surfer_by_stream\":false,\"page_type_id\":1,\"pre_referrer\":\"http://glossy-expanse.com/\",\"domain_id\":62219,\"showcase_theme_id\":10,\"page_request_uuid\":\"6490a1c6-bc23-6aab-561e-a79f46ea2d11\",\"experiment\":\"\",\"experiment_variant\":\"\",\"ban_reason\":\"empty_redirect_hash\",\"redirect_domain_id\":0}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:08 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxMgOIHHytSGPYsH08qBTAvacFyg%2Fnx6ZchNqpX%2BpCMvtQT9SJfhba4Cw7jEoYzyzyOOktSi%2BKQ5nA90org4bx%2BHZZCs9uUoeK80%2Bhf7UoE%2BJdLASg%2BbdsK8HplqNIAYg7SGeyw%3D\"}]}\r\ncf-ray: a3889e016b946ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491,"size_decoded":1112,"mime_type":"application/json","magic":"JSON text data","md5":"149d7f69ae3959386b7ef9a014885b94","sha1":"f79482598b010d153da51fc270221d2d2551b33e","sha256":"30eb9ff31ed08e2f678886be70790d46d02b999e1a4632553e6355a12844cff0","sha512":"60c660d82469679c3452f3098a1670c9161f79d4d8106eb3705a6c49fb33fc58ae6345b69ddac9b263caf20bba35daf25298be4c8cdbb9ae2730e3dc92371763","ssdeep":"","tlshash":"15f00e50f0848b243d2126022fdef227a815a61581d8f56db3665312d531f06b1012a6","first_seen":"2026-09-09T19:32:38.146792Z","last_seen":"2026-09-09T19:32:38.146792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/6Ccny97m.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.985Z","timestamp":1788982323985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/6Ccny97m.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWhrD9qzAjBe%2FV0pDWy5m7gY58KKBa89krspjgwUDrxwVL51Za43dcCRrKb9bOltEXFWfHO%2BEY%2FwfOBPyXCQMPrvkvewTrNjrkwxKLu%2FVa4z8ZkNMa29VpWWSfIJ9qn96vG0mI8%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"30aaa-jJV8Ud2Fich7GPsC24NG0D0XVGo\"\r\ncf-ray: a3889de4fa076ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199338,"size_decoded":72119,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65162)","md5":"4b2cee3864c028d0443b2040b3fcd423","sha1":"8c957c51dd8589c87b18fb02db8346d03d17546a","sha256":"186af7895e9e9866016a6c7d0c14773bdb57a84131ec8dc179ad00c29261d416","sha512":"7103ef8e01c7d3e042b1c31eb6668893f73b23af330fc6c2a1c9b5fd300ff566cc25b0eb21d6484f24b1448d6d427fa2fe22db4c81b733656d5be33c0e8dc57d","ssdeep":"6144:HRt58HXYkS1rZ3JlSbF5SQxPoffbZTXF3ft17CKgs9US94:LAX/SFlSbLSYQXISK","tlshash":"971449d536a2f47107fa05e0a07b1146f2745d24345ec0a1f2acadfb2da6c4a916bfbc","first_seen":"2026-06-25T19:45:04.55813Z","last_seen":"2026-09-09T19:32:38.149811Z","times_seen":524,"resource_available":true,"data":null}},"time_used":3799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2108,"receive":1691,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/vendor-CaoMcDoP.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.987Z","timestamp":1788982323987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/vendor-CaoMcDoP.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hb7vjB5qEUpa2JmB1CGwSQc9FWhVFimFHkQkJ4%2BirX19a%2BbujMN%2BrAFGbc3tmK3TyhLQKjgNBrtVP6mjTi2b6cOQ2DxSM4I7WXbp%2F3Hsl5zyzClEfFpJbjcNPeavJwl5viOz9eg%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"171ef-XrWbKtRJ+ZDxj7vg9U27qSFLMVc\"\r\ncf-ray: a3889de4fa086ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94703,"size_decoded":39850,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34646)","md5":"802328f09ef0783b0d5efb88522cbd75","sha1":"5eb59b2ad449f990f18fbbe0f54dbba9214b3157","sha256":"f5c0d7df3136feeaccc8d3a35b4e1e1f6740364fed66d7e5a7e5473adf7ae997","sha512":"2430cdc4b96b504903d60de207cc78cf1fdb051f4d4f43dc8148a3b0df0b2f8c21bc6e83c133e656440dd6671d47931d6d735278cdfc2042cfed80721b873b63","ssdeep":"1536:pnzwz9dwEO6DtCmZuVIEZaaGj3K9ZHed9:N28nZaaG+9Ud9","tlshash":"f19307e53192b56293ea0ce240770006f3692816384ec9d8f5acedef3a7644551bbfbd","first_seen":"2026-04-22T10:52:38.430699Z","last_seen":"2026-09-09T19:32:38.150761Z","times_seen":1073,"resource_available":true,"data":null}},"time_used":4243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4223,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/useAsyncPageView-Cb8uJyC_.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.990Z","timestamp":1788982323990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/useAsyncPageView-Cb8uJyC_.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYeP7IdBupYTZjASMHnlRfUk7bqg%2B%2FbIkzAb9uBUbqhThD1oZObeJ9JGzO0grC5SxCr8tUhY7hFsWpxs0daIvcp%2FXM3eSFKvRN5s7f9KdyzN16hNYlllnMZ3tkLr0ZFenmeWbYg%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"5049-MJcMtP63fpBTJ2DooYjhaIqpFGo\"\r\ncf-ray: a3889de4fa0b6ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20553,"size_decoded":7461,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15337)","md5":"879b2652dfa958b2c75951b00a4e505b","sha1":"30970cb4feb77e90532760e8a188e1688aa9146a","sha256":"6974c99b4065682ccc547b516eb5c79dd91849622b204fee9ac4543a21a2d377","sha512":"73712c64c45d5ca13089cb51817d0e8146868febe14891e5fe727e2f05869d7316729f90fdb6ed620d813d84e5007cda728cb679d7a4d0f37f61ebc147b57b24","ssdeep":"384:GYAHe2JOYp2yGEMIhQsqS2V5XvUGjOkzL1RuAg:GY+J8s5rZhQsqSifUGbng","tlshash":"9892d98e9a441bfeb38d4ff43a43255a20f49e4196ac453bdb056cff3538464823d99e","first_seen":"2026-06-25T19:45:04.578036Z","last_seen":"2026-09-09T19:32:38.151726Z","times_seen":526,"resource_available":true,"data":null}},"time_used":1474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/useLocale-_xIyerGC.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.991Z","timestamp":1788982323991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/useLocale-_xIyerGC.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPeWe8%2F%2B1cLnleUj6KDLWIHsBtmpYdn5RcgMs%2BdlpDEGu21%2Fn7t1HU7%2FH22x07t33hfSldt4dNEpiIi1dBnSrrflOHDLrxgqzjZA8ED6jLinRKCPfNoVFf98IM4Hfi9Vw4YA0hI%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1ed-cwx+INFQ6OuD0IPlMyDB6b51wgI\"\r\ncf-ray: a3889de4fa0c6ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":1261,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (492)","md5":"8d5e5a677f5b58c30a331596bf8f407c","sha1":"730c7e20d150e8eb83d083e53320c1e9be75c202","sha256":"00fd6d6e785a245fe3bb77e4e994bbd02f829731baf886ddbed4c1554d738e7c","sha512":"85dbdf52e1c4bab4f1c0d51e553cd06dcd1fafdf6a8ca153ba8dc3c493e935925f3c03323e8ec86d068367c79a5daf29ba054b6eff4fe74b6310daf8043a23a8","ssdeep":"","tlshash":"38f0279d3083b079032544f4d5be202003298b9852996ed5a14f058a6b65c6cc39ae2f","first_seen":"2026-06-25T19:45:04.591677Z","last_seen":"2026-09-09T19:32:38.152702Z","times_seen":516,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/useCategory-CfV3IWxL.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.993Z","timestamp":1788982323993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/useCategory-CfV3IWxL.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ou22iCGaNbl2rblUz%2B0bs63C5QITs07mrfnCDjp71lHNDeAdo2KxECoDVbIVZzqOyhEQjaJbNrMY2phLGNStVOIG6oXH6uvSpmzxNy4S%2FJjsGFXaICfdtMxlCShXMis0iS4HqvQ%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"5b-MdJ6HwD3pCEnmlYtf40LPRyjpao\"\r\ncf-ray: a3889de50a0d6ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":1044,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"9f793959842e4a95b915553c5f177db8","sha1":"31d27a1f00f7a421279a562d7f8d0b3d1ca3a5aa","sha256":"00c9e8f1f5e39c8cf3f1f1f0f933c3b9a44483bf8b42162e11634a55a3594316","sha512":"d5974fb4b6f3426f045fbf598b53af7641010d909b1c8b24662459d03903040aada22c65a6018221ab923b4f6fe897f38a322939558379b3d1a06f352f303352","ssdeep":"","tlshash":"50b0124d1044d0f1010046bd4002581ea354c984535d1dd0924289c21b150d5823ee21","first_seen":"2026-06-25T19:45:04.561486Z","last_seen":"2026-09-09T19:32:38.15366Z","times_seen":520,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glossy-expanse.com/_nuxt/empty-DM5gXrPc.js","fqdn":"glossy-expanse.com","domain":"glossy-expanse.com","tld":"com"},"ip":{"addr":"104.21.58.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glossy-expanse.com/","date":"2026-09-09T19:32:03.996Z","timestamp":1788982323996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glossy-expanse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 03:24:13 GMT","end":"Thu, 12 Nov 2026 04:21:44 GMT"},"fingerprint":{"sha1":"1F:8C:F1:9E:6D:15:C1:77:E5:B0:38:E2:D3:03:8C:70:FB:D9:60:4E","sha256":"2B:C6:F6:45:44:A9:C4:9E:FB:09:66:58:8A:40:B8:7E:D0:E9:68:98:C5:32:ED:BF:90:49:9A:69:B2:F8:92:4F"}}},"request":{"raw":"GET /_nuxt/empty-DM5gXrPc.js HTTP/1.1\r\nHost: glossy-expanse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://glossy-expanse.com/\r\nCookie: surfer_uuid=5033f5c1-4338-4d7d-a9a1-eace01ff7c21\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:32:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,HEAD,GET\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PU3ZGo5wUuEE149DzD5TcV%2FmIHu1gjaQlSAGA2r1LDtK%2BpPWwflXfph3%2FPss%2BTzl5k4egVjFwC05QgjE%2BYQl%2B4UlRIF7i8H5tmp6zz7eFPVo%2BllwHmoNOmmJNJXM%2Fwgeq7g%2BbdA%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 10:07:53 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"15a-uW1ynBd0em68XuBcPSoD2/9U7S8\"\r\ncf-ray: a3889de50a0e6ddb-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346,"size_decoded":1233,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (345)","md5":"e1d82350507adb31d118f7c39d44e2b8","sha1":"b96d729c17747a6ebc5ee05c3d2a03dbff54ed2f","sha256":"bf84c654783f6f7197eb5d3d7b6a25beff0f636fdf2254bf2b119f84eff2f5c1","sha512":"4ee3f5f424584cfcd632ea1525ecb6fd7ac66ceff2f905efd91a17a7c9e32bf8e0afeecbe06bb3a5ae487d49d12f21ffb43cbeec703bf7ce16434b7fa0661280","ssdeep":"","tlshash":"41e02d0ff401e8fe413688fad02e28202a00045f43f461e0c3dcbb18b354847cdae608","first_seen":"2026-06-25T19:45:04.594032Z","last_seen":"2026-09-09T19:32:38.154527Z","times_seen":526,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"glossy-expanse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"glossy-expanse.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}