{"report_id":"98a1d8c2-118e-4138-ab78-6b5b8b23c22d","version":6,"status":"done","tags":[],"date":"2026-05-01T09:06:39Z","url":{"schema":"http","addr":"allthingslemon.pages.dev/","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allthingslemon.pages.dev/","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"title":"LEMON","dom":{"size":168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"c68e5bc0eb82c1fa2ce809989bed608d","sha1":"9ea48cd730a0e044ecc6154f91551f94eef85533","sha256":"8b044edbb27b379d7d4f7e26f559a596304f5db201ec69c505c8b14a86db62c5","sha512":"b4353f1fb7b43808dd46c9afa1c81b0d8a6dbe02d1ea9cfdb75bb883349f0ddc1fbe686e541fd6cd62695f7c73ac4704b4475546884f982e03ed636c6d7832bc","ssdeep":"","tlshash":"b8c08cfd6c26002ab2a0abb0b8faf20e29018010a005cc80a28031e8158c79adca77c0","dom_hash":"domhash70ec4ef15b0c0deaa912a572dbde8d92","first_seen":"2026-04-08T19:34:16.548142Z","last_seen":"2026-05-01T09:06:42.711117Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"allthingslemon.pages.dev/","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T09:06:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-01T09:06:15Z","timestamp":1777626375,"ip_dst":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":57624,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-01T09:06:15.120037+0000\",\"flow_id\":1761975655184929,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":57624,\"dest_ip\":\"172.66.44.156\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"allthingslemon.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3484,\"start\":\"2026-05-01T09:06:15.113185+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"lemon-migration.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"lemon-migration.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"allthingslemon.pages.dev","ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-01T09:06:39.728213Z","last_seen":"2026-05-01T09:06:39.728213Z","alert_count":23,"request_count":23,"received_data":1549081,"sent_data":11052,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lemon-migration.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-01-08T15:11:29.222851Z","last_seen":"2026-04-30T19:38:32.405953Z","alert_count":2,"request_count":1,"received_data":433,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allthingslemon.pages.dev/","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcb47651af1d9e58ce88e153c75e16d8","sha1":"d17a0a70e8ae54763c01b6d4e28e1c868c4bece7","sha256":"6ecfa280a2338010ee4d471141c50c88f69fced03065cc0cda002028c0ab99bb","sha512":"eb44953f18924d088bf5bb83e7cd6510aa32ae1f89013d5bc7fd71a01b8a463f4acc092781a42ac7a49efd9ce71fbbcb175c69c756a8596c692abf760f9ffcb3","ssdeep":"","tlshash":"18f0245c2af131b612bb346692030489be504032b1a2dc0e751c96e58fa6a6530e9adf","size":550,"data":"","first_seen":"2026-04-30T19:38:36.256366Z","last_seen":"2026-05-01T09:06:42.77674Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/9ddaae5e5fc26f17338c2ed45047c73a","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39f80f1b784868c1f1f6a368d56ba0d3","sha1":"a9e4fe2ba771c3f85cb5c5fae9c366d423c99fc1","sha256":"661259bd8affdce85aab2f766ff7f6401e477665e4d432efb82ea3164baf0987","sha512":"13d86ff707c34563385a7a33a28fa331fd93e6fc7c896e7b3fb776eaa25ba666d71fd4dc8f7e80e66bd0a9be8fe60e26bfc1137fb4ee21e6264be67f6153022e","ssdeep":"","tlshash":"3490044d7d3d047c11500517317135513513405441c1dc51c30575c333445f7575c3c1","size":45,"data":"","first_seen":"2024-06-28T10:42:43Z","last_seen":"2026-08-04T05:40:10.06097Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/debtlogo.e6da5120.svg","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/debtlogo.e6da5120.svg HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXthosz6jd%2FITHBGjVKIQOhDVK%2FYEkXMSCiibKLijd0JZtbeasmmG3iaAOCeRBWkqZ1yPF87Vt%2B72KEuBj%2F1fSPLLiHROfuvFYuxhjFnDsg6QQKqotYtwrE0uqV2kyIm5E2w5RsBh0MOhbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9ea5820e978c035bc682a43b789ba612\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da1107ed75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5205,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3993c094a5dae17b06154e3b5678f4ff","sha1":"47ab48cf806d78ac40d736bd31a00343750d2ad5","sha256":"2fe2ddae6865baf40d90e96763c8fb61d70e0a8626b6f3cb126769ebe94039d1","sha512":"fe99800f5501a1c24b7ca98755534855667c075b47e9869f97681cbef772de1eb8497ea139fe6479fbea5b44da0385b0b3485b8770b6125d8400f58bab77c70e","ssdeep":"96:d80y89U3cpGYdCguJSUeiygzmFyUR3/UfABdEWMD+m42l9uYJ:dE8rdCgRHdTky/UfAwL+mtlD","tlshash":"aeb12ce496eaa3a0801b1784ec54ae8d2f06eddfa4948b7cbf9ec7511f041c0cf25a94","first_seen":"2026-04-30T19:38:36.245096Z","last_seen":"2026-05-01T09:06:42.714195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/18e01f47b9d74d82.css","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/18e01f47b9d74d82.css HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dtss7aM2r2Ewgcik0T%2BhCkduCrlOj16iHHxM988%2FPxTIj6exwd9yPvuBh%2B4sLb7eSc%2B0roHV6exwh%2FhaNst3UiVDvLRfY%2Bx9%2F16GjQSSV7cQf%2FlgI3vqhkL%2Fi7pFWfVr36xZaH9ywmbVlwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7d6a4847b7883f17001f234e00d2c42c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da10eacad5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7254), with no line terminators","md5":"2d56f330b4c3eb55c8847c443a179982","sha1":"56b31c6a1691af514a7eac511d7f622c9f0a0e97","sha256":"cc5bac8e663fd7dcff4073926656c2a528f6a3a1cea25c8e86905eb48d46b2d8","sha512":"9db7b2da889e605641c0aab51957c60c87c913cc9c26425f53a30cfd3e6ff48ff8e2c9bc2f5559306768c573e53381f1c1c549be4dd64bb93901ce81353f6960","ssdeep":"48:sis31w4cRsm1wLcsst1w2cLsU1wBcWs71wcc1s61wvcAsx1wKcQVhksQVh11wQVK:eOVwfyJjhQhDlhHohj","tlshash":"42e106350539a850d4f7ccf331cfbf03655c5428ea915a66a62e09e88fea83b53e1f24","first_seen":"2026-04-30T19:38:36.241225Z","last_seen":"2026-05-01T09:06:42.71753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/bc7452b34659c838.css","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/bc7452b34659c838.css HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cd7QdgxU1cziDMaL5OVvJeHUbaHXtEZVp0%2FZi342yWey9gGkwh8GMXvhJPtpetZWu306%2FR7FpZzMGpAI8Q2lATiDMtp4V041z6zd5K%2BGv19WEGoU8jVrePTvouH0enokPeV1btNIBnZz7rg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f5b23765147494044e85f7e75b35c350\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da10eacb05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3196), with no line terminators","md5":"1ea8bf0cdaf044ee5327871070b0258e","sha1":"4279dc4e476e7bcb95b5aec5a224a8d11052525c","sha256":"7a4a92928937166a7b4379eb081f16a9fab4699d8faf702cc314fa8d7454df36","sha512":"6632770908c21f5fc3219473fb37bc2d0659285838bcb281e45a98fa5c9075b3a854325a3b96d150ca7f82260d1dbe7669efa2f843f36d576a108d69623276a7","ssdeep":"","tlshash":"7e6142661e06a83cb9e7d8127ee0878c46a66a00efd781d66c937e7949c73d30573a4c","first_seen":"2026-04-30T19:38:36.246115Z","last_seen":"2026-05-01T09:06:42.720498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/9775c54e7ff594791459.js.download","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/9775c54e7ff594791459.js.download HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FiFjajf7ReWmgPrhd3HyIKpQTFbmWImM7kPH8uxfEFsmAMbYNKSB4GyO0O8rtesjjk%2FU8tE%2F2C6IR7Nnh%2FscXBsVa3qQjBN6v9XmlpSmaQxRAUwi2Ip2hCeRiRUIkZUtnVTPEV7RUM%2B12f8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da10eacb15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T02:49:08.475779Z","times_seen":17791700,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/DRIP-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/DRIP-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 57987\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"35eedfc82ee3f9ee01f46983c23fcd7f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIvsn0x4mLR48YAaanCxKH9JCr4Rkkm%2FkjgUdwW1nR2EqTA0m1IXtkSh7jF3UmrvAmw7aHvRVXsfGXF98SGfILibN8jsWEttRa9cQ65TmBWKpRqrLtkR6OeUMGbm%2BR9QkNaVBYNcYRhyY%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10eacb25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"ccb6909f25a16b2d9edf1e0be34455a2","sha1":"0f35fbda2f24ab9707717702b15da3a5b9eeeb41","sha256":"28b3efadf357e1083f19b313aa0f353eea401e699982de4da0e382673a44b509","sha512":"aa0e4b81af95724f616959093763ef8f03732c0abdc9e0187dded315588784d63b3253b542ccd8c58454917e29bc3e8fbe1fcb6bbdb55d57242c1d23e9743722","ssdeep":"1536:M1O1UwZIAiMO/y9RR/y4242OsJbK36Zl31AuWxKnu:M1O6w3s/5XOs+36Zl3N7u","tlshash":"40430208a39f7710f7f79735423e555108f48525b4920f3b92093e1f4ec2266babb6da","first_seen":"2026-04-30T19:38:36.254071Z","last_seen":"2026-05-01T09:06:42.725745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/BEV-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/BEV-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 57669\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"72503ddf96699b7bc261e94f20e83986\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwpFBHkFpShFZe6Bsq%2FgBc7pzCxWKJjBcvbX1JWFNUi6Xvt8W0ETx%2F%2BBYDdNcHo4PKx6IoWyBNtTrexFQnfQiE6S60mzGfoQxTkROuVot0b2W7%2BKfCobgREUKNwRnyS7OqTHr%2F332vjBdrs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcb75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"1db776a639c3491ba630442dcdbfe892","sha1":"089c0c5cecb27774f13d822291372894bb74a7f7","sha256":"91aa1cb0070cb86b5ea16c808bde78c991b394bc0181408008b7d7be9847a385","sha512":"b54d0835fdca54d38f5343f6b98e55852a6a8700a6cf87ce490dd60ef8d2d52fcf73d439520a91cffa7fbc65f22e60eb7678114ea95167a7e82eb5b618cbb670","ssdeep":"1536:9cc8UHRP5H1JGuJk7tM3eyaxeYzVpHNtF5tS6/4gw5jtS:9PdRAC+tLyjapHbFy6/co","tlshash":"db4302e3036e0117f56252ee3f8899c9d264df1f69c9a15c18598e6c7ecda4600fbd32","first_seen":"2026-04-30T19:38:36.235822Z","last_seen":"2026-05-01T09:06:42.728713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/BGLD-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/BGLD-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 51360\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e188d909f1baee837d3afd76c1fe0b80\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBA1HEkPlnQFnMyfQ9os%2FX9MzFPSWJkjTE8wzgFlFEALQauVZv%2F%2F0Vlxcwgv2RQjxY6TO2WHMjbGrt1sLqOgz%2Fa5lyi%2F7AcYokuSjuvEtzLSYVdisnv2CJrIPF6HMcTXmmQqzZdnmzuot6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcbd5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"feb0e28abedae54d8ede24964841621f","sha1":"814d3c06a8826997d0140cab3558ec37e67a6dd9","sha256":"53761dcd5e24e65fa21a0818bcfc88b02dc26d2229cb7de4bfbd34ea597ad401","sha512":"9854180106607eb5193def1ecfce837f4db9cc395c176175d58a70ee27ad15b4fbe467a934daecc9e0929da934cb05d2b82c45ce960413ab8768e467d721f0d4","ssdeep":"1536:2l6UEIvJth08EkpAZTGhTA6VqMdIkqE/s:rUlhrykpsihTA6VwW0","tlshash":"443301e64732758d72c2b02ca162edd5307eccf1dff19b05e2a49d855baf0267d08a82","first_seen":"2026-04-30T19:38:36.222976Z","last_seen":"2026-05-01T09:06:42.731579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/IN8-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/IN8-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 223350\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"99956399274a2d8bc10a74c554825417\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieuShYZFWkImSN6tgPJxqGyhqBngNV9sXREyMv%2BXbWLCK4QfKUWmTGn%2BKaH2brbC8aFXfX9UmOWdz9faC5OpGmaGKpmPZwqvkVP%2FqE%2Byyoq1lDbyJmnd8DsqEoeR9KbYh0Thod5uuzf%2F9VY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ecccf5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"ab5fd2b9f040da8f8879232e1fc5a9d0","sha1":"b75a47d2049b11b7fb0c9d304da2b7177b43f43f","sha256":"820cf8860818689c12d73abf0a94b5d7b65d21b74104003a9f4981b64c5490d6","sha512":"5695f0d756ab669a7c704aa6b60249b051f9c2795dfebd455da64658924f261dfe19799460737e1acfe44bdd82ed36e93c20b0eb8ed8e9669aff8dc9e7cd7a57","ssdeep":"6144:tf8FXVeB4ULJbVrcaHYdQp7Mt60xyBhd9mkQujFeqA:t+VezLJblNHYeVMGH7mkQYXA","tlshash":"d52412e69bf189e5dc3a4ec13b376390b1d1ec99c7527914dedf2cb850948216c0aa37","first_seen":"2026-04-30T19:38:36.228655Z","last_seen":"2026-05-01T09:06:42.734413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/GROW-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/GROW-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 61332\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d99570deca208ca76154527fc9bccb64\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTE%2Bk2GahuAYiuSnfehHrQH%2BF1rzK11lZI7P4Qkm6AJ58DSHN%2B1yQ6Xo8Vf%2FhKfB2i%2BO7Rf3OSOnH%2BVuXiEyq8VBt3ImocRar9HuXMQnHM8znWU5kDSYxApeL2R%2FaSD7akX6IF2eJI3TvTE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebccb5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"45348f2f5fda76af8ce7c3a92f9ed9ca","sha1":"f3f3141627b2cdde65b47abfced9f6508346a071","sha256":"d23b534b5852aeb18a7d86940db5224bce2220afa3277b115b9f9f9af49e54c0","sha512":"46d6e2349d14af41617045f93634de85422a05434a7fd75692f1d9ceeb94673f90b0b004e21f95988858af9962be4a86db5bc2e9be132496665c6fb746805c9a","ssdeep":"1536:JbEhTW6glcrpF+KNIBxjTApKhqJUfsSk78m:hEhTW6glcrnVNcRr+X","tlshash":"815302c5179c3e10494516a8edc60aef736fab771a210becf8026e74bb2cc94ec59463","first_seen":"2026-04-30T19:38:36.251907Z","last_seen":"2026-05-01T09:06:42.73721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/118b51b8b7033530.css","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/118b51b8b7033530.css HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 47\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2fd0a7d7663bf776ff7d8ad63d917e97\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LPu9xcOEyiyRzc2Eo1GaufDRrfORLHPYiNQKjnmsDMbmpXVjQlBj63HOWe3DpaxsvrwL1RVu9JYE7LnqV1fS3KQKsfd0eQjs9FB0NKr5q3rXBcOOqJkxQP2naeemFU13TyOcZ1m24Zx5ik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10eacae5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fbec67f336d28e1b98987228c2971212","sha1":"304f6f65a87c989bd23e52792884dffeebee69d5","sha256":"37a513f450256c29d776a38ea11c2c05586db9490879845158cd4aa0bdb4b99d","sha512":"a69d6edaa8f1fe239fba42829690d41d44ee99241f20f6b1b9f7cd158faf5e3279bbbc410f2c217c48ca2aa659427f7a416d0e265b6f170e492160d0bea1f025","ssdeep":"","tlshash":"549002b815a8654ca9f9094630552c45551150044a0516c1420c2f4784240511564029","first_seen":"2026-04-30T19:38:36.250751Z","last_seen":"2026-05-01T09:06:42.740316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/DEBT-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/DEBT-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 54764\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e0542c443ee0258ba4258462be4368c4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqMSApIooIIhP7Tz%2B8m8lLaNdP4IQaA3kU2dcn6cqlXsNEqBAG%2FsIIZuSS0D8akuRI5AHoNqDFc6gNp4tLm3ir4HfcGJiJlN0SXw3%2BO6mD0zLMTu%2FSJS2ceoVbLzYKk5D36tUGpZ4ZaO%2Fwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcce5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"970aa165dac2b4e2b3b0e1e27e92f99f","sha1":"f4de5bd964bf69f4bd939e9a725f143f48c51daa","sha256":"3bc528c09dec8750ea0af06936c611cbc033526afc344aa430703a0c0edefdaa","sha512":"3f56d07b714f01e936916f2f94cf361b7b88ea014a7f22385150e0ab6211b52f7ec6040493080a7df20a4e704c5c3279959c4d0d0f67efec4ee6d1e400554c4c","ssdeep":"1536:cHll12UeZG+evoCF1iA9BJoJCv89c4NGrosq5HUGmrOiTY:Cl1Zvxowv8fwRG9T","tlshash":"763302472fe51888846fca76c29a273cd857256c1c7dc38c4da5468b7ea932c8fb3725","first_seen":"2026-04-30T19:38:36.249556Z","last_seen":"2026-05-01T09:06:42.743139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/9ddaae5e5fc26f17338c2ed45047c73a.html","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/9ddaae5e5fc26f17338c2ed45047c73a.html HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-length: 0\r\nlocation: /LEMON_files/9ddaae5e5fc26f17338c2ed45047c73a\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlJcf5aAdsK3aZ6RDIKGn9jfdVkOkNskNVNVKbYWRBYl7gPgz2Fk3e1cx5rNX41SGivP9yD8n9fmPZcpgrImw%2FE6HFl2eMusU8YxPI2OTp5QYdSu3jmQlCJ8ULBz%2FgIi0aqjiOOndeQgeY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10fee1b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a6f1e454bbe2ea6d053a8efde058862d","sha1":"b5a1e922ffb10a172ea953bc0a35c061d3e85cbb","sha256":"e75528847b3ffd51d4fd1d652772b2b73d9df1f169be4e312e822d7335fcb525","sha512":"34e93dbe416cc09887d3ade54d010722a4b5bac925a15e76fa7f03bdd94e6a3512657915b04177642c8c8900db844c97925eb38715a94dc1fe966b1f1e9382c6","ssdeep":"","tlshash":"76d097fe6d22202ab27017e074e8f20d39028810a289ccd2e28034b814c87dafcb73e1","first_seen":"2026-04-30T19:38:36.244045Z","last_seen":"2026-05-01T09:06:42.745905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/NATG-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/NATG-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 55244\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"334a5ebf1e4810dbf88379361f053cab\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLd3yZha4b3JEKliPL7Nk2vZS1VIwrPdHaBPLP1Pledh%2FAFNZZszqNhoL02%2B9iwYvmyd3nHcjU9RpM0lDt%2BYk2nIHrNb3AzZv%2FkJl3Llqr0WPqlFYswma3M5%2BJ%2FJV21L44uFJcEWQn%2FVaQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcc65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"795c593b7cfe85c49572ced1296db7f4","sha1":"1ec2afba70300e0ef1941d734da5bf6bf5d9ad59","sha256":"86cae7949e0023de56132394084df72897851cbc5c816c248c4669cff90b52dc","sha512":"e104f9d7bbfe1cd6c48f3373f52ae6aef0a02e24139e0e8ed9cddf71420a1731278e23155c88454e3ff332c2b3c2837c38b659db8147c7af8b584676e4b7b113","ssdeep":"1536:kjmu/hCKKHE/u+G7oVpiPxLYZkZYZ5W0aVTrCPc:k9ssmR7gUPuoOHeyc","tlshash":"3443016cc21fde1d8a666f50a0923c17f029efd7d4a52f922d3b1bf7078a00ce899520","first_seen":"2026-04-30T19:38:36.248263Z","last_seen":"2026-05-01T09:06:42.748604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/BLOX-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/BLOX-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 58296\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bc78741d0c8f3698cac9485587f06d89\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45BV2HiQ58SSwSWi2U%2FwIFgm8YcVfTbMjTapCuH8bJQ8xXXGE72%2Fohe%2FZPbBWWam3QneknQGf7U071If7tXE8P8JQjrE7VQKHJGvU4bwwndtxgsaSm3a1ju3kDzFqY%2FpYXpCKlfXpGd5uxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10eccd45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"27b823186443bc02bcd6542e0ccee12b","sha1":"f4361b2a3fc27d40f9d4f5bab491b13b12cc1173","sha256":"8a31d7980ee8a505a25f5072c775a5f56f6e87e21300076402e1f152912f1c87","sha512":"f0bb051f85aece47c35ff6823087e15865eaca40f40c6034cc397ffb121edaba4d846278f34fe063558fc040a66855f9cd013265393954c2dd09b2453790f3b5","ssdeep":"1536:f+95H6ln9K7t39mjc8JbobXhtarrZyA85tQa7e0k4LGlUjYm:WWn9Q99mjnborSrZH85tQaq0k4T","tlshash":"fd43028565ffedcbe10df7625233e5420b4a41b7d07aacc58c42f482feb00b09976946","first_seen":"2026-04-30T19:38:36.239417Z","last_seen":"2026-05-01T09:06:42.753204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemon-migration.pages.dev/favicon.ico","fqdn":"lemon-migration.pages.dev","domain":"lemon-migration.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon-migration.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 17:29:57 GMT","end":"Tue, 02 Jun 2026 18:26:14 GMT"},"fingerprint":{"sha1":"9E:56:3E:1C:56:CB:AE:3B:17:2C:9D:22:23:7C:4F:84:F7:28:6D:1E","sha256":"79:E5:DB:46:9E:06:4E:60:D7:48:59:E9:29:78:05:66:70:D3:BA:0F:73:0F:64:9A:5F:21:F3:88:2C:92:4C:08"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lemon-migration.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 4649\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9f4da110d83732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T02:49:08.475779Z","times_seen":17791700,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":88,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"lemon-migration.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"lemon-migration.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/REV-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/REV-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 58372\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bb23e6dfe1bb3387ad9eab3744d33259\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zorem0rt8ukIPCn0S%2BqMgIoqLBT5BEBUi6MkKnj4yHkvZycCLcvDc6Hc%2BODSwuz2ksmCUWy%2FbsUuPFSI5PaSYVDF1tOnavs%2FgPcoFDqIGqvb8VmrK20Y5%2BvhcFHp86oV8K6vWbZtb%2BNBtsA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcba5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"d63a4df9e326e673620ac06672ff13cc","sha1":"0523052fa4ff682593f26f8924fb601a694f4b46","sha256":"55fbd34b429f660408abb6a1c3d61c3c3c600d285c4b35c0d4ec67c1424fa8ed","sha512":"c25b0c5ef968e7bd7d2e59298a82ca0e08774d5b35f88633bf2b72dcd0acb338cc43943dad335deaf2464fd0c0206b6759aa33bd4cd14a8ca0115f7e256d8e73","ssdeep":"1536:SZ/Ex4ZlJwGnt5dBQQSNwzEV33mu6tzgdG9Ji74e:ShE2Vwct/BQZwzEV3GtziGve","tlshash":"ef43f1f09739fbd889c1315d52479c8c9f307887f7511975ea32d82fbc181585a4e678","first_seen":"2026-04-30T19:38:36.224636Z","last_seen":"2026-05-01T09:06:42.75593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/ALUM-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/ALUM-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 82512\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"dab4a2962c30701f7f97614f5251c649\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDLwVRoTa9sX5vtfJcqwrUOTkLISjNsFkQKGUfrtc5o%2F%2FR113on540CrPCXxHj%2F2Z6JofW%2Fru7%2FyTb1WwSUa6vPglAtrzz2rIVbYCFwBdsGVeXrgxQlpCXXUR0XbleNv%2BM%2BthtbR10xTuLM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcc25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"5fad736503f13cea7d887e2194c19571","sha1":"6afb79bf63fce9a135fc3ca0b387647a42afeb4b","sha256":"e893c70506b509b82529e0d7a1c6a20c8d746845e9f44eae85c6b466cb5d17ea","sha512":"bcd347ba9113cba01d3fbd2988bc378dc50343cd1851d33f10a5f8ee7bbd10a10879abb6e18bce15e44c8695776aec4b1ffd495284625744fa36e542779ab34b","ssdeep":"1536:5oHWwOmXmtaOXsIY+ZoPfULm1S3IBl3FuyNa9DMaYGZpn9ChOLWQ4g7OI:+23RXN9GbS4H3FulpMaYm9CoKNgSI","tlshash":"0e8302b3d1613bad644402680b872d3aae61dd586cf51a154707afe842debe470f8bdc","first_seen":"2026-04-30T19:38:36.237673Z","last_seen":"2026-05-01T09:06:42.758761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/cf7f2803917a02c7.css","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/cf7f2803917a02c7.css HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJjJ%2FlLqRc2V1OOenRzFsoua7poBCZgh9ejZkPIgnVTG2sLWkcyoiLLWJa59bzwL7NOS4xo0hHAgQTT6UBaKM46xyivFNKf%2BLvcGJtORXePzwMMPcMBHu%2ByukqdOkAKWphaySE0JXP2Fpcs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0eea7a67176a7c75a0aa61c3761e3aa6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da10eaca95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27948), with no line terminators","md5":"75f0d82d9906974e9e1e6367ff6d3e03","sha1":"dac8a177f3c8ffd2a01ffbcc0810ca5dd05b5d9d","sha256":"2f0877ab2f3368679ecdee6d48081dee62af9f4fbf98d5a931b0b1b258c2b0bf","sha512":"cc407973bcfa1134c6f0ecf0f9ce021a8dc412f61c07d862b3375adf57b33b9342961fb59eff91e35c880e9e650635c3e5fa019b7f6bb0b03be020c329990fae","ssdeep":"384:TQSedy83BcYz9ho5WT6AgzyA7vPojPqdmRIn:TQSYRIpAgzyA7ojPqkRq","tlshash":"9bc2ca093e2d3f39ba13a32441c0849c520b775feebd87a7acd1265dad9c78431ac679","first_seen":"2026-03-25T22:58:44.784499Z","last_seen":"2026-08-03T23:32:29.132378Z","times_seen":56,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/DLG-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/DLG-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 71585\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"18dafe9af0cbce76a100bcae8e5a74f4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNEHIvOFOmKHmLZSDn6POFxwwaWtqHRz1u3PGUTS7hHtBc9sewq24yhM%2Bw9bWN0tlnVowa19sQ6E7Y4zqafPG49boI02JhDGn0UUYkg7vaUAK3DWM0UiyV6UuXsDdvOUNqwM56kHSXl2MX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10ebcc05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"1241cde448ceb21e12fea87c398991ba","sha1":"5b91d5900fe8c9b4516e1de09d030e4e115ab38a","sha256":"b7e2deafbf1160b9cd0dd1b2e0aaa08d5c3184661759fc394ecc62a9256f6c15","sha512":"7121bfa88bf098e29a8e75a4effa3264cc127e12f8793da02437f62b0383904946b8df67209699ff9d31f9a66f849d0722f4f28f52a2b62415dfd92ba9dc92e1","ssdeep":"1536:0fEfzfoRP24jzDYGNA2OTCQj6rFdYOFL2mPerYIIZbHV+bEAOA2:0Gzfyrjz8N2OTjurqmPnHV+bEV","tlshash":"b663026dbad12ce65a6ce53638601dff22dcdd02220b6921249416489c68d7cbfadf98","first_seen":"2026-04-30T19:38:36.247196Z","last_seen":"2026-05-01T09:06:42.764018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/XPLR-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/XPLR-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 61442\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a79e5d150062023cd027385e687779ee\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShHJ9b%2BRxrTI4i1pr%2FVU1Jkvpg38yUtwqb8fww2TQcLMPBlttQ3q394FAa6o5Jn%2BdApR8957tCiLPym%2FoOhuwglV0jQYj80Bk0fycj89XtusYOUajQnpClL90rY9CtJBEmNfhp2nbSbsLhU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10eccd65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"05e08e199bc9b4cea4117819c6be58a7","sha1":"aa5678213c3d80b5b91db495180608f192355926","sha256":"2222b5f5d7cbb2c715ddf92613dbdfd732c431513a3d403665eba6acea89e4fb","sha512":"22fdf00dafaad08d54abe24f23fcba847d8dbf244cfdb91e277b255fabbd9237f048928795a9e16bf2abee0c0dc6f21803acddb20f683ae04830e25f21ec89ea","ssdeep":"1536:gTlpcsAi7T6DaRAQHmfTGtogUgfY1uQV3BZ5s3R:eEO7oaRRGs1bh0xiR","tlshash":"bc53024150d899cf103ce8e05656be2cc465aff9833c6c869e5a8f9845ea88d070ff8f","first_seen":"2026-04-30T19:38:36.242677Z","last_seen":"2026-05-01T09:06:42.766809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/9ddaae5e5fc26f17338c2ed45047c73a","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/9ddaae5e5fc26f17338c2ed45047c73a HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqFXv%2Bnv71a9RRd57U6XW7YNGLRZkqwSwd4z151OwJxYJqAy8DgXn5PLEjg8IPpYd%2Byu5%2Fv5fhEsiVLbitaXKnIGHINYeDNZMZ%2FyLdBAiODavw8a3i8014iyoFj8vWBnY4ce1HeYKuH7l7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da1103e875693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a6f1e454bbe2ea6d053a8efde058862d","sha1":"b5a1e922ffb10a172ea953bc0a35c061d3e85cbb","sha256":"e75528847b3ffd51d4fd1d652772b2b73d9df1f169be4e312e822d7335fcb525","sha512":"34e93dbe416cc09887d3ade54d010722a4b5bac925a15e76fa7f03bdd94e6a3512657915b04177642c8c8900db844c97925eb38715a94dc1fe966b1f1e9382c6","ssdeep":"","tlshash":"76d097fe6d22202ab27017e074e8f20d39028810a289ccd2e28034b814c87dafcb73e1","first_seen":"2026-04-30T19:38:36.244045Z","last_seen":"2026-05-01T09:06:42.745905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T09:06:15.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdwG2Z1N28CYI6LQcl8%2BA%2FIHhFna19XDmYBUT0itqEzfELwYnn5wNRwm9RiIG81F741GB5m19dn158Y%2FTev7Bx2DCe2dh7Gf1xbyfjpD%2BN42Rkl0WK4H2IRHq7XPFHon6zmwDW1TsPvrMRg%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da10c9de3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542913,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2492)","md5":"160bb5659cccbf49ab5de5ca72125194","sha1":"bd7172659c5c5220a2cff8a1b4cd522576b70628","sha256":"71733a0b66416b63b89ed216098fa80a3956d383a190096ca91872dd6425e313","sha512":"1ce34c6f746525a37067ea219bb407a8b2b7f2c681aeddd729b2b86b017a1c127316d396bcd74681820728c4a0637f0ef240ba87d216796e170b7dbcefaa1ea1","ssdeep":"3072:KDMLn8C91Fz5ry8P/8XQ+8OUOTAJ/q0Ccu0zNQ:GMLn8C91Fz5rdr0","tlshash":"33b4a66106576f2e140bf77542f92eba561840078c66ff79b7ec81ed8f2eb5a84c4238","first_seen":"2026-04-30T19:38:36.252916Z","last_seen":"2026-05-01T09:06:42.770564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":37,"dns":17,"connect":1,"send":0,"wait":155,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/e4f4f13c9169f170b.js","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /e4f4f13c9169f170b.js HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeoPKDmI7LqFzNm424Oshe9S6XFdzc7%2FQ%2Fhk076L%2FiPZrjzj5AJzeowX5LQzNTTVOh5FRrkW03nOzA9cMtlvKMEzuAoaPciNDImPZ41xARJ4karMXER%2BT8561fewaMW6GXaRQiURFyFhRxk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4da10eaca85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T02:49:08.475779Z","times_seen":17791700,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allthingslemon.pages.dev/LEMON_files/DCM-360x360.png","fqdn":"allthingslemon.pages.dev","domain":"allthingslemon.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allthingslemon.pages.dev/","date":"2026-05-01T09:06:15.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allthingslemon.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 09:48:57 GMT","end":"Tue, 09 Jun 2026 10:47:35 GMT"},"fingerprint":{"sha1":"08:92:56:FD:75:89:67:E4:BA:48:56:15:26:23:9C:46:45:4D:F1:51","sha256":"5F:0F:90:4A:2D:76:0C:55:BF:11:F8:C1:AB:E1:18:95:B3:1F:E5:6C:F5:2E:D9:A5:8D:46:01:C7:33:A1:71:A0"}}},"request":{"raw":"GET /LEMON_files/DCM-360x360.png HTTP/1.1\r\nHost: allthingslemon.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allthingslemon.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 09:06:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 50456\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5b84434990d099cc49de00fd9208ebad\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItdOECztFNuHaibALr4WXrBMRQoTaWOdvb7RFWZDcxCBJx00pR%2FCLx8wZUVD7aYIK%2BxEkXdudaBeHgJ2lM0PQ6U0esJnk9%2B682eJ4p9xZOf8RultU0XTBSyaOc6XD5nTyBCvD%2B1TdavG7SM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4da10eacb45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, interlaced","md5":"99c71a2e9a56fcb87a785cc8992f21b4","sha1":"83bccb7d25bf57120c93577d2b117f9f0bd9697a","sha256":"6a8789f9a231d58a0644f188342b26f1a204e7de2a22bfbea543f7b9a8209c17","sha512":"26b97b993ef4fde66897467935941a2f1e60c7b4b3b6afaf37be2ba2ac81d44b070234408121a4764effaabe920c3a9ec475eb37db3e14a7a11587644406adce","ssdeep":"1536:wXt41rQwuQaXJwui08/DwTrEsGD8QcxXUxZD+Z:wKGQa5wj08uEsGDyBUDD+Z","tlshash":"963301be524dbbe0ea51a56d87ef34150804bc68dbc50aac9cbfc43367897173587d14","first_seen":"2026-04-30T19:38:36.255224Z","last_seen":"2026-05-01T09:06:42.773671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"allthingslemon.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}