{"report_id":"9cfc9b3e-a1a4-42bd-bdbd-6d05467c5974","version":0,"status":"done","tags":[],"date":"2026-07-12T19:59:10Z","url":{"schema":"https","addr":"mcglynger.com/","fqdn":"mcglynger.com","domain":"mcglynger.com","tld":"com"},"ip":{"addr":"104.21.45.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mcglynger.com/","fqdn":"mcglynger.com","domain":"mcglynger.com","tld":"com"},"title":"Prohibition of","dom":{"size":2782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1104)","md5":"7f9c8c7e561fdc55eb13cf212c1524e4","sha1":"368f05abc57d451bdf3416f019c7ecb25bb237fd","sha256":"75d2581d62586f07d80e4f7e65dfab089025d582619b813db1a617dd48a297c7","sha512":"45be4fb978a0d7c34bff6c55fd50c948241b447046475ff2b18058abcf56c3d920518196934553cbb6950dd4a4af9d6d3366df074e6d2a46d3ef639df5986682","ssdeep":"","tlshash":"e05194e36540883baa534294a84fb107967da9428c1b4c4092c8cbed13cafd6cef3671","dom_hash":"domhashc875f1a01d2f18bb64b3283db9eeefd3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mcglynger.com/","fqdn":"mcglynger.com","domain":"mcglynger.com","tld":"com"},"ip":{"addr":"104.21.45.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:59:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mcglynger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mcglynger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"github.com","ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"domain_registered":"2007-10-09","domain_rank":40,"first_seen":"2016-07-13T12:28:22Z","last_seen":"2026-07-09T06:08:25.190449Z","alert_count":0,"request_count":1,"received_data":5078,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"release-assets.githubusercontent.com","ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":67648,"first_seen":"2025-05-11T09:28:38.217452Z","last_seen":"2026-07-11T01:46:27.29022Z","alert_count":0,"request_count":1,"received_data":124597418,"sent_data":1414,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"mcglynger.com","ip":{"addr":"104.21.45.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-21","domain_rank":0,"first_seen":"2026-03-28T09:55:02.652178Z","last_seen":"2026-07-09T20:12:00.640731Z","alert_count":2,"request_count":1,"received_data":640,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"97e71a0b63be90dc599803000192bbbc","sha1":"977d429f368dec848d3c29c186d1c1c6f6a0c86a","sha256":"850c03138e8815c06d51dc4ebbeae33251f0bac584630127e4718971ef3bad78","sha512":"83abe5fe0c142c0e1c0f0d98d61341cf9bc9e4d17cd9a465e654225f0fdf8052293e4d581b8f684aa39280d1f6bc3c29e71aa347358c87f7052034a2435127b2","magic":"Zip archive data, at least v1.0 to extract, compression method=store","size":124596584,"url":{"schema":"https","addr":"release-assets.githubusercontent.com/github-production-release-asset/1271547887/5c1cece1-793a-40e0-9209-266d72ff46c3?sp=r\u0026sv=2018-11-09\u0026sr=b\u0026spr=https\u0026se=2026-07-12T20%3A53%3A58Z\u0026rscd=attachment%3B+filename%3Dcore-project.zip\u0026rsct=application%2Foctet-stream\u0026skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0\u0026sktid=398a6654-997b-47e9-b12b-9515b896b4de\u0026skt=2026-07-12T19%3A53%3A43Z\u0026ske=2026-07-12T20%3A53%3A58Z\u0026sks=b\u0026skv=2018-11-09\u0026sig=oFPr%2Fy9%2FTcVQnFEBZJnIQ7BlU0Bv53p3TlcjJ9vfaE4%3D\u0026jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc4Mzg4OTkyMSwibmJmIjoxNzgzODg2MzIxLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.8BDiw35cW1A7gtWiPfhH8gVKAJnMvszgwG2l7Bo8h1c\u0026response-content-disposition=attachment%3B%20filename%3Dcore-project.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"release-assets.githubusercontent.com","domain":"release-assets.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mcglynger.com/","fqdn":"mcglynger.com","domain":"mcglynger.com","tld":"com"},"ip":{"addr":"104.21.45.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cae3b6bf80149ca3dcac31fd95e609f5","sha1":"c62e1f192921f17dc1b9fc1fc3c35ecc68f93047","sha256":"d151306e3ec57bc982bed67b1e1025a47d88a6551106fcf4eae4a8e97ecdc50b","sha512":"8cb3fde29900be12239f66e6e0d8f2e6ba684968512cf52a32c10394056c2464cd9d43d883346778efb111172264a03bb11c2b523330b894ca261391488d4a74","ssdeep":"","tlshash":"b111dcd8318f6cbf37a22478a80f745a987e39421c085d58468ddb5953acf9bcce6c30","size":968,"data":"","first_seen":"2026-07-12T19:59:12.446193Z","last_seen":"2026-07-12T19:59:12.446193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mcglynger.com/","fqdn":"mcglynger.com","domain":"mcglynger.com","tld":"com"},"ip":{"addr":"104.21.45.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7d1b9e6eddda81925b970bc67aa34b30","sha1":"c01c6405ac232b27d36bc68dc47394148070b04b","sha256":"01ed2eeeefc787800aa6d8a9e2f866c983e68aefb24a759d701fc87bb5acdcc6","sha512":"c791efbdbab9b601d82ec9ecf4e1654b401456a143548c9730713070ba395b8cd9057b4f4efc4d3467e4dce10a3813ba82051b0c6245b1bb5bb40c96781197a3","ssdeep":"","tlshash":"cb9002a085848e26870665986b6481753c20414859da2201523a10319054c015881db0","size":50,"data":"","first_seen":"2026-07-12T19:59:12.448026Z","last_seen":"2026-07-12T19:59:12.448026Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"github.com/mchathurika478-dev/turbo-octo-enigma/releases/download/1/core-project.zip","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:58:41.532Z","timestamp":1783886321532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Wed, 30 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A5:47:1F:87:66:FE:AF:B2:EE:46:99:70:AE:DA:6C:61:4D:14:B2:1B","sha256":"17:F8:FD:2E:3F:D2:C1:13:FC:B9:77:2D:8A:4B:AB:B8:52:2D:D0:6D:D0:79:49:15:A4:FF:98:B1:B6:86:3A:00"}}},"request":{"raw":"GET /mchathurika478-dev/turbo-octo-enigma/releases/download/1/core-project.zip HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mcglynger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 12 Jul 2026 19:58:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://release-assets.githubusercontent.com/github-production-release-asset/1271547887/5c1cece1-793a-40e0-9209-266d72ff46c3?sp=r\u0026sv=2018-11-09\u0026sr=b\u0026spr=https\u0026se=2026-07-12T20%3A53%3A58Z\u0026rscd=attachment%3B+filename%3Dcore-project.zip\u0026rsct=application%2Foctet-stream\u0026skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0\u0026sktid=398a6654-997b-47e9-b12b-9515b896b4de\u0026skt=2026-07-12T19%3A53%3A43Z\u0026ske=2026-07-12T20%3A53%3A58Z\u0026sks=b\u0026skv=2018-11-09\u0026sig=oFPr%2Fy9%2FTcVQnFEBZJnIQ7BlU0Bv53p3TlcjJ9vfaE4%3D\u0026jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc4Mzg4OTkyMSwibmJmIjoxNzgzODg2MzIxLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.8BDiw35cW1A7gtWiPfhH8gVKAJnMvszgwG2l7Bo8h1c\u0026response-content-disposition=attachment%3B%20filename%3Dcore-project.zip\u0026response-content-type=application%2Foctet-stream\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\nserver: github.com\r\ncontent-length: 0\r\nx-github-request-id: E92C:2B93AA:6C6AFEF:515611A:6A53F1F1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T23:40:28.518186Z","times_seen":17325131,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":171,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"release-assets.githubusercontent.com/github-production-release-asset/1271547887/5c1cece1-793a-40e0-9209-266d72ff46c3?sp=r\u0026sv=2018-11-09\u0026sr=b\u0026spr=https\u0026se=2026-07-12T20%3A53%3A58Z\u0026rscd=attachment%3B+filename%3Dcore-project.zip\u0026rsct=application%2Foctet-stream\u0026skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0\u0026sktid=398a6654-997b-47e9-b12b-9515b896b4de\u0026skt=2026-07-12T19%3A53%3A43Z\u0026ske=2026-07-12T20%3A53%3A58Z\u0026sks=b\u0026skv=2018-11-09\u0026sig=oFPr%2Fy9%2FTcVQnFEBZJnIQ7BlU0Bv53p3TlcjJ9vfaE4%3D\u0026jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc4Mzg4OTkyMSwibmJmIjoxNzgzODg2MzIxLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.8BDiw35cW1A7gtWiPfhH8gVKAJnMvszgwG2l7Bo8h1c\u0026response-content-disposition=attachment%3B%20filename%3Dcore-project.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"release-assets.githubusercontent.com","domain":"release-assets.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:58:41.783Z","timestamp":1783886321783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /github-production-release-asset/1271547887/5c1cece1-793a-40e0-9209-266d72ff46c3?sp=r\u0026sv=2018-11-09\u0026sr=b\u0026spr=https\u0026se=2026-07-12T20%3A53%3A58Z\u0026rscd=attachment%3B+filename%3Dcore-project.zip\u0026rsct=application%2Foctet-stream\u0026skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0\u0026sktid=398a6654-997b-47e9-b12b-9515b896b4de\u0026skt=2026-07-12T19%3A53%3A43Z\u0026ske=2026-07-12T20%3A53%3A58Z\u0026sks=b\u0026skv=2018-11-09\u0026sig=oFPr%2Fy9%2FTcVQnFEBZJnIQ7BlU0Bv53p3TlcjJ9vfaE4%3D\u0026jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc4Mzg4OTkyMSwibmJmIjoxNzgzODg2MzIxLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.8BDiw35cW1A7gtWiPfhH8gVKAJnMvszgwG2l7Bo8h1c\u0026response-content-disposition=attachment%3B%20filename%3Dcore-project.zip\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: release-assets.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mcglynger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 13:32:33 GMT\r\netag: \"0x8DEDE87B2DB0D73\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: a52dd3ce-f01e-0001-4471-10be89000000\r\nx-ms-version: 2018-11-09\r\nx-ms-creation-time: Fri, 10 Jul 2026 13:32:33 GMT\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\nx-ms-server-encrypted: true\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 269\r\ndate: Sun, 12 Jul 2026 19:58:41 GMT\r\nx-served-by: cache-iad-khef600070-IAD, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4, 0\r\nx-timer: S1783886322.819630,VS0,VE91\r\ncontent-disposition: attachment; filename=core-project.zip\r\ncontent-type: application/octet-stream\r\ncontent-length: 124596584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":124596584,"size_decoded":834,"mime_type":"application/octet-stream","magic":"Zip archive data, at least v1.0 to extract, compression method=store","md5":"97e71a0b63be90dc599803000192bbbc","sha1":"977d429f368dec848d3c29c186d1c1c6f6a0c86a","sha256":"850c03138e8815c06d51dc4ebbeae33251f0bac584630127e4718971ef3bad78","sha512":"83abe5fe0c142c0e1c0f0d98d61341cf9bc9e4d17cd9a465e654225f0fdf8052293e4d581b8f684aa39280d1f6bc3c29e71aa347358c87f7052034a2435127b2","ssdeep":"24576:6rMWFm25nwfHwgR0nRK9TrfSY9bRTjAlPrCzIm4yVTRUDh:C88W6KprT3EdVuzUDh","tlshash":"e025330bc143031ac38fe1626ae5c6d21179f9615fdd638b6c58f759af0081bead07ae","first_seen":"2026-07-12T19:59:12.443668Z","last_seen":"2026-07-12T19:59:12.443668Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3191,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":100,"receive":3060,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mcglynger.com/","fqdn":"mcglynger.com","domain":"mcglynger.com","tld":"com"},"ip":{"addr":"104.21.45.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:58:40.976Z","timestamp":1783886320976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mcglynger.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 17:06:11 GMT","end":"Sat, 03 Oct 2026 17:06:10 GMT"},"fingerprint":{"sha1":"C9:0F:AA:40:7D:41:13:89:E3:D9:6D:93:C0:9F:6F:E3:24:E7:8F:A9","sha256":"32:BC:6E:CD:05:92:4E:08:51:8C:E8:D9:F3:63:E8:C7:35:8C:01:4F:33:BD:0F:B8:09:C2:E8:67:F7:77:6F:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mcglynger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:58:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NneyRdbltzMX0gkKPynTPkdCZjpLrWz5i22P%2B8LoRArhTkhS7ADS%2BhUihZdoGRVL%2B%2BguxQ%2Bdzp44q93ioVeuDXScgmbS9u4KgwfY%2FmkSmgJKKYlQes6bnJ3u%2FT8jEmd%2F\"}]}\r\nx-powered-by: PHP/7.2.30\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a1a29fc26c5ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T23:40:28.518186Z","times_seen":17325131,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mcglynger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mcglynger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
