{"report_id":"9a34463c-9243-45c0-82ad-d545656062ef","version":6,"status":"done","tags":[],"date":"2025-10-05T01:27:44Z","url":{"schema":"http","addr":"rvphlmjq.patriotmarineproducts.click/nMnPvZ06eWtn8k3Si1Ta190X/n4/WpkmYsuVw9IpKjRgYhAz/7dMMveBuk/VECN3BPpXtEs6BcCcZxGLZE/7Y/oNOfjLRSbB97273O56fBFFhs/rMev__M7/tzn6ImD8K4fEizDn3irkA/7MYvx/YG4IUTectbPFkznNkUZgW/_ed_/2ojnbuS70josGZfnFyNipIX/7ddx/m5zAXEaWbpYFWcpqORksHzq/","fqdn":"rvphlmjq.patriotmarineproducts.click","domain":"patriotmarineproducts.click","tld":"click"},"ip":{"addr":"104.168.104.201","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"title":"We are sorry to see you go"},"submit":{"url":{"schema":"http","addr":"rvphlmjq.patriotmarineproducts.click/nMnPvZ06eWtn8k3Si1Ta190X/n4/WpkmYsuVw9IpKjRgYhAz/7dMMveBuk/VECN3BPpXtEs6BcCcZxGLZE/7Y/oNOfjLRSbB97273O56fBFFhs/rMev__M7/tzn6ImD8K4fEizDn3irkA/7MYvx/YG4IUTectbPFkznNkUZgW/_ed_/2ojnbuS70josGZfnFyNipIX/7ddx/m5zAXEaWbpYFWcpqORksHzq/","fqdn":"rvphlmjq.patriotmarineproducts.click","domain":"patriotmarineproducts.click","tld":"click"},"ip":{"addr":"104.168.104.201","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-09T01:27:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rvphlmjq.patriotmarineproducts.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cussfans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cussfans.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cussfans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.optoutsystem.com","ip":{"addr":"52.33.43.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-03-06","domain_rank":1492563,"first_seen":"2018-11-08T11:41:51Z","last_seen":"2025-09-29T00:52:25.867679Z","alert_count":0,"request_count":4,"received_data":2140,"sent_data":2454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.trainfourshirt.com","ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-09","domain_rank":0,"first_seen":"2025-06-14T21:26:19.38672Z","last_seen":"2025-10-03T20:58:57.927744Z","alert_count":0,"request_count":10,"received_data":1098865,"sent_data":4894,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rvphlmjq.patriotmarineproducts.click","ip":{"addr":"104.168.104.200","port":80,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-10-01","domain_rank":0,"first_seen":"2025-10-05T01:27:44.925814Z","last_seen":"2025-10-05T01:27:44.925814Z","alert_count":2,"request_count":2,"received_data":1420,"sent_data":1382,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":3241,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cussfans.com","ip":{"addr":"192.186.156.20","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"domain_registered":"2025-08-11","domain_rank":0,"first_seen":"2025-08-31T18:20:31.276288Z","last_seen":"2025-10-05T01:25:06.375747Z","alert_count":3,"request_count":1,"received_data":1315,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.12.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sentry.io","ip":{"addr":"35.186.247.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":135,"first_seen":"2016-08-31T05:38:44Z","last_seen":"2025-09-28T22:13:48.066329Z","alert_count":0,"request_count":1,"received_data":556,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-WBT3hVsl.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1345fa65365b74f16c5dc7ea4c690921","sha1":"07392cb87ec22589382b73dfd417004578e849d1","sha256":"cf67e0a3516fec6391b9c2019def5a779b2d0ab9e890cd4614725a34989df08b","sha512":"d946e5b3c6019818d524bce50de91b73df24d5fa0baf1691fd59c125a202fcc926261b63f9f12810b9ccccea4f6d1560d9c04f99f6499849c01d2c968c0f87a4","ssdeep":"12288:8GWQxVLvJNxqRBSCvocg69tDTGJmcdDd9ibBbQzLce70izb:gQxhBNxqRBSCvoWtDTGJXabBbQzL770u","tlshash":"96f42beab2c1f36653e236a4402b910fb2bc9c65e45c9090a3d6dddf3db0906513bf69","size":773871,"data":"","first_seen":"2025-10-01T11:58:42.4317Z","last_seen":"2025-10-06T23:48:51.347194Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/__vite-browser-external-DYxpcVy9-XPXQPciS.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d80cc4e06a6915da6c0b9a50019d37e","sha1":"4e7483a8dcee01bcf597665fc7f7d6e2363bb659","sha256":"82507b0bb9ac4affaeb17c40968d830cbd6d14a2ffa04d8994faf1a78e58e1b5","sha512":"3ca538f667c66f3d08ce7cb57d7f5a3bb41b7ae6b89fd0e90785a71808cb0b86541824f7f619141cd01ce82bb47a90f96bc9566a261308080ef60dfd105eabf2","ssdeep":"","tlshash":"4c80000a2802c0f220b00082a22282e2a280aacc3322328822ca0aa280020c0880cb00","size":33,"data":"","first_seen":"2023-10-22T06:12:15Z","last_seen":"2026-04-10T09:37:07.619715Z","times_seen":21131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/clsx-YZZWIpAv.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"699246129a50d9264f7fc78803dd2e82","sha1":"0fcebd406c97de4ccc5074c267859f46fb9b8081","sha256":"ba88ebe1e6baf5e07c1239fca4d54aa48dd639672a3f842aa41405d109a830db","sha512":"6fc37d77ee775fb891a505a64d1a9382c65674d322d5e1c7a02541d505bed54a67a9e81f083e46ce9f1c86d2eaa20262515702d81b107b226f836d88b8f60c02","ssdeep":"1536:gOe0tNo455wjffgVKKyNyXGNojrxmHMN45YvqWRD6PXYOWNEWdeRzElsXo2Nle:gOe03o4PwjU7xYMbi//wMRzEy4Ye","tlshash":"0dc365b77a40ab6774b13f18cf06e28f9fcc8c92dc98a08c9ae7d9db1950422607d755","size":119399,"data":"","first_seen":"2025-10-01T11:58:42.403471Z","last_seen":"2025-10-06T23:48:51.344333Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-AyXZBtk3.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d9e51e1f60888362568939d6c56bef","sha1":"4a284111a4baeb02802e649891f238e28712a868","sha256":"11ad979159b64a81b76119f84d5940cf6e05ecf520fbba4f13c899c2dc0cde17","sha512":"6b33c26d9ac878b054c912bb99525cdc30ac153eea9e40b94e7489b72c12c08a686ee38868791d6a40c9b7ec77a572f52dfe79b0f8df9f9b9be8aa38410931ba","ssdeep":"768:byU7ej8b4T4brTN/wDub4nZ3UiAmB/Qd/:bZedSPFmxQl","tlshash":"43b2c708e061b6fce82a1d94b5bf901970173facda3d84b191be1c09a27c5c57b17bd9","size":25274,"data":"","first_seen":"2025-10-01T11:58:42.424456Z","last_seen":"2025-10-06T23:48:51.343264Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"sentry.io/api/1314267/envelope/?sentry_key=6c20ba397902400f9d47007cf6200a24\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.64.0","fqdn":"sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"35.186.247.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:5D:97:97:7A:AA:2D:23:D7:21:D1:D4:EF:2E:3B:0D:50:F0:11:3C","sha256":"F3:73:7A:50:D7:AC:5C:4F:8E:94:6B:EC:E0:EA:D2:F8:6F:EE:EA:F8:DF:BA:97:5D:92:0E:ED:DA:82:D9:6D:BA"}}},"request":{"raw":"POST /api/1314267/envelope/?sentry_key=6c20ba397902400f9d47007cf6200a24\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.64.0 HTTP/1.1\r\nHost: sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trainfourshirt.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 470\r\nOrigin: https://www.trainfourshirt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nx-envoy-upstream-service-time: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-10T09:55:30.480505Z","times_seen":566850,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":66,"dns":3,"connect":13,"send":0,"wait":139,"receive":2,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optoutsystem.com/optout/optout-key/decrypt","fqdn":"api.optoutsystem.com","domain":"optoutsystem.com","tld":"com"},"ip":{"addr":"52.33.43.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.optoutsystem.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 31 Mar 2025 00:00:00 GMT","end":"Wed, 29 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:45:77:B2:11:BA:4C:E0:08:12:CE:D1:38:2C:65:F2:BF:51:FC:1F","sha256":"0F:17:22:35:B6:61:E8:FD:67:C8:78:B0:99:0E:B6:33:42:50:34:34:11:73:70:08:0C:33:C0:EF:8A:D4:9B:0E"}}},"request":{"raw":"OPTIONS /optout/optout-key/decrypt HTTP/1.1\r\nHost: api.optoutsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trainfourshirt.com/\r\nOrigin: https://www.trainfourshirt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://www.trainfourshirt.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T09:55:52.302984Z","times_seen":13573949,"resource_available":true,"data":null}},"time_used":1309,"timings":{"blocked":561,"dns":0,"connect":186,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/favicon.svg","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"0x8DDE4647AFC9783\"\r\ncf-ray: 989922f0ba5b56b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBTYJAsIVldnqOeNCDDHGxOx4M2Qm6EtR0qM2JPHWmjh2BK76temreJVOXR7ez8kOG4y0jO%2Bxmxum5zRJO5BUBFMijgR6dmMkGCgLOVw%2Bga5tzOv\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 26 Aug 2025 05:50:36 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20250901T053842Z-r15c78f6b5dzvvskhC1STOzb80000000043g000000003ez3\r\nx-cache: TCP_HIT\r\nx-fd-int-roxy-purgeid: 0\r\nx-ms-request-id: c1c57f70-201e-010f-2abf-190bc8000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:57 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31b80ed5eec1550e0edf662f65482c48","sha1":"70646d79d67a64d3bf556994f8acb8ea4f6d188a","sha256":"091bb10503146884448a8af965872f9d26c2f72cdbcec9153dcef0f57a13e400","sha512":"421d6ee051c7b5f2616c8ac3824ae034b21e69a33954c54a5dc2054a8f0be4980b7276d3e9ca74b31b350ae0820a7af2411195300adb87d3526c48b7564a7477","ssdeep":"","tlshash":"7ef08be0b064954e0f340378cbbc76d64076318e230d064cb18826bcf86d3bb2444759","first_seen":"2024-02-09T11:03:50Z","last_seen":"2026-04-10T09:37:07.618499Z","times_seen":22337,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optoutsystem.com/optout/optout-key/decrypt","fqdn":"api.optoutsystem.com","domain":"optoutsystem.com","tld":"com"},"ip":{"addr":"52.33.43.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.optoutsystem.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 31 Mar 2025 00:00:00 GMT","end":"Wed, 29 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:45:77:B2:11:BA:4C:E0:08:12:CE:D1:38:2C:65:F2:BF:51:FC:1F","sha256":"0F:17:22:35:B6:61:E8:FD:67:C8:78:B0:99:0E:B6:33:42:50:34:34:11:73:70:08:0C:33:C0:EF:8A:D4:9B:0E"}}},"request":{"raw":"POST /optout/optout-key/decrypt HTTP/1.1\r\nHost: api.optoutsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 93\r\nOrigin: https://www.trainfourshirt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 503\r\nvary: Origin\r\naccess-control-allow-origin: https://www.trainfourshirt.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-remaining: 1499\r\nx-ratelimit-reset: 1759627706\r\nx-ratelimit-limit: 1500\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":503,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ba1f60df4f1c649896db0839b532ae5","sha1":"2f6efaa205397f520ea550da6fa1ce8699465388","sha256":"448dd516c3991df0abc9b311d298f3370d109777d15027a8f2f90adb307d84a1","sha512":"2e0bcaa9081485156e3c9cf5590a975c1e235d1d38e84ab8e0cb7d4681fb8fb7e184b83df045b6272bde0226ef5e8dd70f1e75b5bc96c46fb8e4326406ee754d","ssdeep":"","tlshash":"96f00516d069d9f47dc02609abc840c05e79597621a4c574f1ec061c972ded6b343680","first_seen":"2025-10-05T01:27:46.329789Z","last_seen":"2025-10-05T01:27:46.329789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":169,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"rvphlmjq.patriotmarineproducts.click/nMnPvZ06eWtn8k3Si1Ta190X/n4/WpkmYsuVw9IpKjRgYhAz/7dMMveBuk/VECN3BPpXtEs6BcCcZxGLZE/7Y/oNOfjLRSbB97273O56fBFFhs/rMev__M7/tzn6ImD8K4fEizDn3irkA/7MYvx/YG4IUTectbPFkznNkUZgW/_ed_/2ojnbuS70josGZfnFyNipIX/7ddx/m5zAXEaWbpYFWcpqORksHzq/","fqdn":"rvphlmjq.patriotmarineproducts.click","domain":"patriotmarineproducts.click","tld":"click"},"ip":{"addr":"104.168.104.200","port":80,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T01:27:23.708Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /nMnPvZ06eWtn8k3Si1Ta190X/n4/WpkmYsuVw9IpKjRgYhAz/7dMMveBuk/VECN3BPpXtEs6BcCcZxGLZE/7Y/oNOfjLRSbB97273O56fBFFhs/rMev__M7/tzn6ImD8K4fEizDn3irkA/7MYvx/YG4IUTectbPFkznNkUZgW/_ed_/2ojnbuS70josGZfnFyNipIX/7ddx/m5zAXEaWbpYFWcpqORksHzq/ HTTP/1.1\r\nHost: rvphlmjq.patriotmarineproducts.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 05 Oct 2025 01:27:23 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLocation: https://cussfans.com/dKntS_3Q_gKLP0x6Tmiq86TJVgSK-JbZIwNZxEHN6ePoucU8oG6059b7ec7f1TFBWkM_cwTZ4RjJwpN_ImFyxg~~\r\nContent-Length: 1779\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T09:55:52.302984Z","times_seen":13573949,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":148,"dns":0,"connect":148,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rvphlmjq.patriotmarineproducts.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-rXJICDJD.css","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/index-rXJICDJD.css HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncontent-type: text/css\r\netag: W/\"0x8DDFF2D710BE549\"\r\ncf-ray: 989922ee1a0156b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5ulkeaNH%2BALzAnUOwzKzTwfFh%2F%2BiU2ZfH4FKjSAwARMF%2BcLMNVNJn4TqucW6DyQ2PS256XzHXJTIu9vEzcDCRwvm5iWEpnJUq%2FPlIwjNCQZiu9c\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Sep 2025 07:54:39 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20250930T032630Z-168dc87564fscgc8hC1STO6d9n0000000zvg000000002u2a\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\nx-fd-int-roxy-purgeid: 83698633\r\nx-ms-request-id: 4e8bfcfc-001e-00df-0816-31f467000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:57 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1325)","md5":"4432855f50071f8b18ed60721e0f51de","sha1":"92a4d6637402233afc5d8cdc081a79e881559ff0","sha256":"c0164dd1715c654a661c2f34ac9fc3ee07cabdd8c58e21cbc868e93f7f460909","sha512":"0043104821d0fdee0b0360bd44a75972adb45b9a147cd0bc44c921ddae73a087f7fd3088bb96810ab3f8f6e7728436a9aa3013ab4ad0c81d88bc6f1b545e540a","ssdeep":"","tlshash":"8a21567be60a5a50b3f7cf3906da1348b972f673c56582aab150e41c9783e0d04a4545","first_seen":"2023-12-31T07:47:08Z","last_seen":"2026-04-10T09:37:07.623515Z","times_seen":22410,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optoutsystem.com/optout/optout-key/page/296821","fqdn":"api.optoutsystem.com","domain":"optoutsystem.com","tld":"com"},"ip":{"addr":"52.33.43.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.optoutsystem.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 31 Mar 2025 00:00:00 GMT","end":"Wed, 29 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:45:77:B2:11:BA:4C:E0:08:12:CE:D1:38:2C:65:F2:BF:51:FC:1F","sha256":"0F:17:22:35:B6:61:E8:FD:67:C8:78:B0:99:0E:B6:33:42:50:34:34:11:73:70:08:0C:33:C0:EF:8A:D4:9B:0E"}}},"request":{"raw":"OPTIONS /optout/optout-key/page/296821 HTTP/1.1\r\nHost: api.optoutsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://www.trainfourshirt.com/\r\nOrigin: https://www.trainfourshirt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://www.trainfourshirt.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: authorization\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T09:55:52.302984Z","times_seen":13573949,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/clsx-YZZWIpAv.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/clsx-YZZWIpAv.js HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sFHZuYFaFNpKLGY%2BUKe9W0wEjGNxoUNP%2B6jZ3nphSVVXGVDe46KA2bk7FZuOWz2%2BMvM9j3vdwa%2FT%2F4UWTmno%2FwXG6uM%2BgYOyCodj0N4%2FfFFsXxStSg51jw%2FQsYD9V1qWZ2AyWx3RwfW8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 989922f6fa7856b1-OSL\r\ncf-cache-status: HIT\r\nage: 88\r\ncache-control: public, max-age=14400\r\netag: W/\"0x8DE00BFCDCEFC57\"\r\nlast-modified: Wed, 01 Oct 2025 07:54:52 GMT\r\ndomain-integrity-check: true\r\nx-azure-ref: 20251001T075610Z-168dc87564fb8jw4hC1STOvt5w00000002y00000000051fg\r\nx-cache: TCP_MISS\r\nx-fd-int-roxy-purgeid: 83698636\r\nx-ms-request-id: 2ea6821f-301e-0047-6da8-324d89000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:58 GMT+0000 (Coordinated Universal Time)\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=861\u0026min_rtt=451\u0026rtt_var=147\u0026sent=248\u0026recv=106\u0026lost=5\u0026retrans=5\u0026sent_bytes=268936\u0026recv_bytes=7643\u0026delivery_rate=100705722\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=131790\u0026unsent_bytes=0\u0026cid=0e7f9d9acdb8617d\u0026ts=1503\u0026inflight_dur=78\u0026x=115\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119399,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"699246129a50d9264f7fc78803dd2e82","sha1":"0fcebd406c97de4ccc5074c267859f46fb9b8081","sha256":"ba88ebe1e6baf5e07c1239fca4d54aa48dd639672a3f842aa41405d109a830db","sha512":"6fc37d77ee775fb891a505a64d1a9382c65674d322d5e1c7a02541d505bed54a67a9e81f083e46ce9f1c86d2eaa20262515702d81b107b226f836d88b8f60c02","ssdeep":"1536:gOe0tNo455wjffgVKKyNyXGNojrxmHMN45YvqWRD6PXYOWNEWdeRzElsXo2Nle:gOe03o4PwjU7xYMbi//wMRzEy4Ye","tlshash":"0dc365b77a40ab6774b13f18cf06e28f9fcc8c92dc98a08c9ae7d9db1950422607d755","first_seen":"2025-10-01T11:58:42.403471Z","last_seen":"2025-10-06T23:48:51.344333Z","times_seen":268,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-AyXZBtk3.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/index-AyXZBtk3.js HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0x8DE00BFCDCB054F\"\r\ncf-ray: 989922f6fa7756b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQatQiKewSr37rSn2W4C0TnlYCYStudH6FcFafXF7%2FjEe2SzLKk%2FM%2B9yRN%2F4N%2FOULsXoSRgdEsJijQdLwto1Z4a9ww1qERT1r6TEqtIlLFGgByB9\"}]}\r\nage: 87\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 01 Oct 2025 07:54:52 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20251005T012558Z-168dc87564fm7t4nhC1STO0d3c0000001ccg000000002xcv\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\nx-fd-int-roxy-purgeid: 0\r\nx-ms-request-id: 405d19b5-101e-000b-7a09-3578c2000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:58 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":25274,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25265)","md5":"80d9e51e1f60888362568939d6c56bef","sha1":"4a284111a4baeb02802e649891f238e28712a868","sha256":"11ad979159b64a81b76119f84d5940cf6e05ecf520fbba4f13c899c2dc0cde17","sha512":"6b33c26d9ac878b054c912bb99525cdc30ac153eea9e40b94e7489b72c12c08a686ee38868791d6a40c9b7ec77a572f52dfe79b0f8df9f9b9be8aa38410931ba","ssdeep":"768:byU7ej8b4T4brTN/wDub4nZ3UiAmB/Qd/:bZedSPFmxQl","tlshash":"43b2c708e061b6fce82a1d94b5bf901970173facda3d84b191be1c09a27c5c57b17bd9","first_seen":"2025-10-01T11:58:42.424456Z","last_seen":"2025-10-06T23:48:51.343264Z","times_seen":253,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvphlmjq.patriotmarineproducts.click/nMnPvZ06eWtn8k3Si1Ta190X/n4/WpkmYsuVw9IpKjRgYhAz/7dMMveBuk/VECN3BPpXtEs6BcCcZxGLZE/7Y/oNOfjLRSbB97273O56fBFFhs/rMev__M7/tzn6ImD8K4fEizDn3irkA/7MYvx/YG4IUTectbPFkznNkUZgW/_ed_/2ojnbuS70josGZfnFyNipIX/7ddx/m5zAXEaWbpYFWcpqORksHzq/","fqdn":"rvphlmjq.patriotmarineproducts.click","domain":"patriotmarineproducts.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T01:27:23.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /nMnPvZ06eWtn8k3Si1Ta190X/n4/WpkmYsuVw9IpKjRgYhAz/7dMMveBuk/VECN3BPpXtEs6BcCcZxGLZE/7Y/oNOfjLRSbB97273O56fBFFhs/rMev__M7/tzn6ImD8K4fEizDn3irkA/7MYvx/YG4IUTectbPFkznNkUZgW/_ed_/2ojnbuS70josGZfnFyNipIX/7ddx/m5zAXEaWbpYFWcpqORksHzq/ HTTP/1.1\r\nHost: rvphlmjq.patriotmarineproducts.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T09:55:52.302984Z","times_seen":13573949,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":550,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"rvphlmjq.patriotmarineproducts.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 01:27:25 GMT\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fcf63d91b46adf99bd3db1a56530254","sha1":"62f7d93d0b191e1e8464958268f225f51dd1752d","sha256":"63867a7c4bb197935b85ada1c4bcbc95951598dfb736b24132f0a43e5e5e365c","sha512":"16d25c5cc841006ca8e86ef334efb051054257e6990275a3a0d1e25f9adc6c665b65ff9083dfc9c409d84b69365a26eb9ba875431ca75765743b70902e684d14","ssdeep":"","tlshash":"0451ab92002ba404ab931dc233cf7f3aaece50856085d2b96ffd1dc65cead66436875d","first_seen":"2025-09-10T17:57:06.167004Z","last_seen":"2026-04-10T08:03:55.227136Z","times_seen":24821,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":53,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/__vite-browser-external-DYxpcVy9-XPXQPciS.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/__vite-browser-external-DYxpcVy9-XPXQPciS.js HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/assets/index-WBT3hVsl.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0x8DDEB6439B40EF7\"\r\ncf-ray: 989922eeca0756b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMcaUKV3q6tGRQ49p4kXYCR1unykCcbD%2FI1yiCi4I0s7cwb%2FiIafiRulxQd528O%2B0DFoGXz2BrtgX1K%2FosvpkcojfAGzF6MoljnD20RpYnn4LZpl\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 04 Sep 2025 03:36:25 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20250907T052656Z-r15c78f6b5dmlsxghC1STOe87n0000000pf0000000005mby\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\nx-fd-int-roxy-purgeid: 83698620\r\nx-ms-request-id: 7d9ee802-801e-0020-0a9d-1f5d75000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:57 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6d80cc4e06a6915da6c0b9a50019d37e","sha1":"4e7483a8dcee01bcf597665fc7f7d6e2363bb659","sha256":"82507b0bb9ac4affaeb17c40968d830cbd6d14a2ffa04d8994faf1a78e58e1b5","sha512":"3ca538f667c66f3d08ce7cb57d7f5a3bb41b7ae6b89fd0e90785a71808cb0b86541824f7f619141cd01ce82bb47a90f96bc9566a261308080ef60dfd105eabf2","ssdeep":"","tlshash":"4c80000a2802c0f220b00082a22282e2a280aacc3322328822ca0aa280020c0880cb00","first_seen":"2023-10-22T06:12:15Z","last_seen":"2026-04-10T09:37:07.619715Z","times_seen":21131,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-ZK6TGWZV.css","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/index-ZK6TGWZV.css HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: text/css\r\netag: W/\"0x8DDD542364C3743\"\r\ncf-ray: 989922f6fa7656b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9ltjIEC5Vip48EBEW9xvarAOKbYy84iBOvLQSBUoqLQXj%2Bd7rBJa7%2BYgowylrKokEAaTH3KSQhXOul3gJfgWJ00JdOiILbOVVA3fch%2BC4mXbSCQ\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 23:37:31 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20250817T111957Z-15d7546b5674kgj7hC1STO77cg00000009p0000000000tgh\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\nx-fd-int-roxy-purgeid: 83698609\r\nx-ms-request-id: f6f3beb2-b01e-00ad-5caf-0e6aa7000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:58 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22152)","md5":"b82b5b2a65d71874db38588f79c433f9","sha1":"2d0c740d763776932ab1995e24f31f7856989472","sha256":"f40fe61df5eb33c7aaafdcdb684b0589d349a4d2ff34e3fe3eff8dc008b3f17d","sha512":"9bd749ead471bb69b284a452a6ec03507d35c9805d8a150b309b50ff204ac72e701831f52e93a1429ab2707bd5b7af84577228a24b3c9cb487d8c30896ffc3ba","ssdeep":"192:O9JyW9JyyBwYYoK7rPkQ4d+Bvh27CjkdzBtpL4wl4JSU1TeZNoqpn9l:kwD0jnPrswvuTeZNTnL","tlshash":"a7a2551aa610103f7c6388ead5d4f599722ab1c1df3996f6ed866120e7cb7f31d93208","first_seen":"2025-02-11T10:01:48.684631Z","last_seen":"2026-04-10T09:37:07.620482Z","times_seen":21578,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.trainfourshirt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:42:29 GMT\r\nexpires: Fri, 02 Oct 2026 12:42:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218697\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-10T09:54:08.715096Z","times_seen":138862,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":48,"dns":0,"connect":8,"send":0,"wait":9,"receive":11,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/clsx-YZZWIpAv.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/clsx-YZZWIpAv.js HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/assets/index-AyXZBtk3.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0x8DE00BFCDCEFC57\"\r\ncf-ray: 989922f73a7a56b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKkAxgr%2B751gpJ%2Fjdd9KLgLnTrWDsOHka9pZ7GPnLROz9WH%2BmOcUrFZwRM6XjOGdRsg11TvLfHdgMC786wQHa%2Fen9ET5o6bfTAIHJ44LoMpOAYYZ\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 01 Oct 2025 07:54:52 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20251001T075610Z-168dc87564fb8jw4hC1STOvt5w00000002y00000000051fg\r\nx-cache: TCP_MISS\r\nx-fd-int-roxy-purgeid: 83698636\r\nx-ms-request-id: 2ea6821f-301e-0047-6da8-324d89000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:58 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":119399,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"699246129a50d9264f7fc78803dd2e82","sha1":"0fcebd406c97de4ccc5074c267859f46fb9b8081","sha256":"ba88ebe1e6baf5e07c1239fca4d54aa48dd639672a3f842aa41405d109a830db","sha512":"6fc37d77ee775fb891a505a64d1a9382c65674d322d5e1c7a02541d505bed54a67a9e81f083e46ce9f1c86d2eaa20262515702d81b107b226f836d88b8f60c02","ssdeep":"1536:gOe0tNo455wjffgVKKyNyXGNojrxmHMN45YvqWRD6PXYOWNEWdeRzElsXo2Nle:gOe03o4PwjU7xYMbi//wMRzEy4Ye","tlshash":"0dc365b77a40ab6774b13f18cf06e28f9fcc8c92dc98a08c9ae7d9db1950422607d755","first_seen":"2025-10-01T11:58:42.403471Z","last_seen":"2025-10-06T23:48:51.344333Z","times_seen":268,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-WBT3hVsl.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:25.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/index-WBT3hVsl.js HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0x8DE00BFCDCDC403\"\r\ncf-ray: 989922ee1a0056b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3NmLTMDj5vInK%2BEZlPD6YuJxqQoEpwkqKK71eUK89LcUmka3JdsFDrFqLDO%2FUOS2VY%2BU0p8JYTR7YYUCPHubblhd1QNgBs9O0k9pkOOX8omCJNw\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 01 Oct 2025 07:54:52 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20251001T075604Z-168dc87564fmqsqwhC1STOvhh4000000102g00000000e9xw\r\nx-cache: TCP_MISS\r\nx-fd-int-roxy-purgeid: 83698636\r\nx-ms-request-id: 54513e92-501e-0047-78a8-32e8f2000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:57 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":773871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17580)","md5":"1345fa65365b74f16c5dc7ea4c690921","sha1":"07392cb87ec22589382b73dfd417004578e849d1","sha256":"cf67e0a3516fec6391b9c2019def5a779b2d0ab9e890cd4614725a34989df08b","sha512":"d946e5b3c6019818d524bce50de91b73df24d5fa0baf1691fd59c125a202fcc926261b63f9f12810b9ccccea4f6d1560d9c04f99f6499849c01d2c968c0f87a4","ssdeep":"12288:8GWQxVLvJNxqRBSCvocg69tDTGJmcdDd9ibBbQzLce70izb:gQxhBNxqRBSCvoWtDTGJXabBbQzL770u","tlshash":"96f42beab2c1f36653e236a4402b910fb2bc9c65e45c9090a3d6dddf3db0906513bf69","first_seen":"2025-10-01T11:58:42.4317Z","last_seen":"2025-10-06T23:48:51.347194Z","times_seen":268,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optoutsystem.com/optout/optout-key/page/296821","fqdn":"api.optoutsystem.com","domain":"optoutsystem.com","tld":"com"},"ip":{"addr":"52.33.43.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.optoutsystem.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 31 Mar 2025 00:00:00 GMT","end":"Wed, 29 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:45:77:B2:11:BA:4C:E0:08:12:CE:D1:38:2C:65:F2:BF:51:FC:1F","sha256":"0F:17:22:35:B6:61:E8:FD:67:C8:78:B0:99:0E:B6:33:42:50:34:34:11:73:70:08:0C:33:C0:EF:8A:D4:9B:0E"}}},"request":{"raw":"GET /optout/optout-key/page/296821 HTTP/1.1\r\nHost: api.optoutsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0eXBlIjoib3B0b3V0IiwiY2FtcGFpZ25faWQiOjI5NjgyMSwibWFpbGVyX2lkIjoxNjQ4MjEsImNtYV9pZCI6NzUwNjc0MjgsImlhdCI6MTc1OTYyNzY0NiwiZXhwIjoxNzYxNDQyMDQ2fQ.fnVXVCrVBX6GULtJCyJ9FE-PAcDg3p2vp2LJmBwxT4w\r\nOrigin: https://www.trainfourshirt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 172\r\nvary: Origin\r\naccess-control-allow-origin: https://www.trainfourshirt.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-remaining: 1498\r\nx-ratelimit-reset: 1759627706\r\nx-ratelimit-limit: 1500\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":172,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f138aa519c0af778da470765aea3514e","sha1":"3192ff5f13ccf822a1a4ed5f33d3ac695e26e318","sha256":"dd6d49a44dc3392bc0c6b2e93705c201ed8c700962257cd7fb2b516cc0d76e09","sha512":"aff4416a81fe6ebacef1ee613e064f9525e9a71653b7c9adc6d0da6088cb05f22a765e033b0c792277eed79159dc5ef6a53539656f19afd25b8e8420ddd7c61f","ssdeep":"","tlshash":"b6c04cb59c698c6a03c5994256487d15539e9323c3651e3d0414df4f11f5bb852b4a45","first_seen":"2023-04-05T16:11:23Z","last_seen":"2026-04-10T05:32:37.855492Z","times_seen":18257,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/assets/index-AyXZBtk3.js","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","date":"2025-10-05T01:27:26.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /assets/index-AyXZBtk3.js HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trainfourshirt.com/assets/index-WBT3hVsl.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Sun, 05 Oct 2025 01:27:26 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0x8DE00BFCDCB054F\"\r\ncf-ray: 989922f71a7956b1-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZ810qZ90%2B0u7uKCJQqoTEUKI4hRAGG5m%2BKA72H215w%2FynyBECs1wSW%2B9PwZzP6na4foiQeiX6YkeqfMw8ipvikZxWUF24UOhNwmbzyEV6bZK2uo\"}]}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 01 Oct 2025 07:54:52 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20251005T012558Z-168dc87564fm7t4nhC1STO0d3c0000001ccg000000002xcv\r\nx-cache: TCP_HIT\r\nx-cache-info: L1_T2\r\nx-fd-int-roxy-purgeid: 0\r\nx-ms-request-id: 405d19b5-101e-000b-7a09-3578c2000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:58 GMT+0000 (Coordinated Universal Time)\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":25274,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25265)","md5":"80d9e51e1f60888362568939d6c56bef","sha1":"4a284111a4baeb02802e649891f238e28712a868","sha256":"11ad979159b64a81b76119f84d5940cf6e05ecf520fbba4f13c899c2dc0cde17","sha512":"6b33c26d9ac878b054c912bb99525cdc30ac153eea9e40b94e7489b72c12c08a686ee38868791d6a40c9b7ec77a572f52dfe79b0f8df9f9b9be8aa38410931ba","ssdeep":"768:byU7ej8b4T4brTN/wDub4nZ3UiAmB/Qd/:bZedSPFmxQl","tlshash":"43b2c708e061b6fce82a1d94b5bf901970173facda3d84b191be1c09a27c5c57b17bd9","first_seen":"2025-10-01T11:58:42.424456Z","last_seen":"2025-10-06T23:48:51.343264Z","times_seen":253,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cussfans.com/dKntS_3Q_gKLP0x6Tmiq86TJVgSK-JbZIwNZxEHN6ePoucU8oG6059b7ec7f1TFBWkM_cwTZ4RjJwpN_ImFyxg~~","fqdn":"cussfans.com","domain":"cussfans.com","tld":"com"},"ip":{"addr":"192.186.156.20","port":443,"asn":55286,"as":"SERVER-MANIA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T01:27:24.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cussfans.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 00:30:10 GMT","end":"Thu, 27 Nov 2025 00:30:09 GMT"},"fingerprint":{"sha1":"B6:75:8F:BA:B6:29:82:E7:F4:7F:B3:F0:28:21:8B:D6:02:A8:24:BD","sha256":"20:B7:F4:A9:C8:9C:5F:54:16:0A:69:EC:3B:D3:0A:BA:10:E7:30:F8:74:99:24:FB:5D:4B:E4:76:95:A5:42:0B"}}},"request":{"raw":"GET /dKntS_3Q_gKLP0x6Tmiq86TJVgSK-JbZIwNZxEHN6ePoucU8oG6059b7ec7f1TFBWkM_cwTZ4RjJwpN_ImFyxg~~ HTTP/1.1\r\nHost: cussfans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 05 Oct 2025 01:27:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.12.2\r\nlocation: https://www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.12.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T09:55:52.302984Z","times_seen":13573949,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":219,"dns":0,"connect":106,"send":0,"wait":159,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cussfans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cussfans.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cussfans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trainfourshirt.com/o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756","fqdn":"www.trainfourshirt.com","domain":"trainfourshirt.com","tld":"com"},"ip":{"addr":"104.21.16.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T01:27:25.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trainfourshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:29:40 GMT","end":"Thu, 01 Jan 2026 16:27:26 GMT"},"fingerprint":{"sha1":"57:CE:45:89:91:D2:5F:F0:7F:48:01:2E:10:EA:E4:8E:BF:8D:79:C3","sha256":"D4:34:9B:9D:E8:8F:29:89:D8:3A:51:2A:86:47:B9:C9:66:6C:71:8B:72:90:EE:21:A6:AA:EC:EB:CA:77:AB:14"}}},"request":{"raw":"GET /o-nhst-u57-83c6fc9d2fbfab5d1eb816ade1445756 HTTP/1.1\r\nHost: www.trainfourshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 01:27:25 GMT\r\ncontent-type: text/html\r\ncf-ray: 989922ed9ffb0daa-OSL\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 88\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 01 Oct 2025 07:54:52 GMT\r\nserver: cloudflare\r\ndomain-integrity-check: true\r\nx-azure-ref: 20251005T012556Z-17d8bf5df44pqc74hC1STOa69w0000000g7g0000000012vs\r\nx-cache: TCP_REMOTE_HIT\r\nx-cache-info: L2_T2\r\nx-fd-int-roxy-purgeid: 83698636\r\nx-ms-request-id: 96710720-501e-00fd-5083-353178000000\r\nx-ms-version: 2018-03-28\r\nx-spoke-cache: true\r\nx-spoke-cache-at: Sun Oct 05 2025 01:25:56 GMT+0000 (Coordinated Universal Time)\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPt5fSmSKUhW87CkQlTkIgZFKURcpvxfHGiOeY00oZRalGCzQIBpRO4O7TDcxOeW%2BoTIWAfuRfRl8H2dcBO0YZwLceJ7MZ%2BUgt0Zbn1gu%2BD2JFKHZr0%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a114464b885374e763289077bc541691","sha1":"b7d2a1a845daf6b7df61bf60aedb6204f1a1de2a","sha256":"d29da136de7cf745492b7dedd94b49386a4166c1c1a081ebed7bfe0351fa43a2","sha512":"923872491d654fa864cb7a5834b58231ed443542952b577118d3bdebf71f0cb181100cdee79b885a9462b51cdd84b7b663c53487c0d1f9fbe15f56208b04e505","ssdeep":"","tlshash":"a01102934ce4c1e5231450d16da1702dcd47e0cf1754a85870ee8068cfe27d44a5bee4","first_seen":"2025-10-01T11:58:42.406214Z","last_seen":"2025-10-06T23:48:51.383252Z","times_seen":268,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":12,"dns":1,"connect":2,"send":0,"wait":19,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
