{"report_id":"9e0f3fe2-01ba-40fd-8492-aa20d7ccd443","version":6,"status":"done","tags":[],"date":"2025-10-21T19:27:35Z","url":{"schema":"http","addr":"exmoin.net","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exmoin.net/","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"title":"Sign up with the promo code EXMO20"},"submit":{"url":{"schema":"http","addr":"exmoin.net","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-25T19:27:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":1,"received_data":293,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"exmoin.net","ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":12,"received_data":280361,"sent_data":5444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exmoin.net/","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"005c61f8d4e841a1569b203097c744e5","sha1":"e3ad75faea9a3492aea189644af09c156286dc10","sha256":"fa400c14d61ea18591cf89399a351c7b59beba8a3dc6bc45fb3123d460554b0e","sha512":"4ed18a168ac28e1978ffb3a31a6ef1949a3c6452b968625b78cc93f425d771ee7fb7074423a52a7882e921b319985962c42c3f66e486be339e5f8ecccfb48fa6","ssdeep":"","tlshash":"1ae0c0d671190cb664d905f623b5a514f1571508a4192d22cdfdc8143858697581218c","size":353,"data":"","first_seen":"2025-10-21T19:27:41.925676Z","last_seen":"2025-10-21T19:27:41.925676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exmoin.net/build/images/benef-img-3.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/benef-img-3.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: W/\"68c02731-f90\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vs45dp1yV2t17JbELpgBK55E7lzY7%2F0bg2T7EvaU4EqMrpBlmTN%2BH7dzxvFWD5q2nPAlpnrT6eiXadWScwH87z32coMr9SuE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 992326af3809b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3984,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8c3f61173fbccd055e3318fb94f3f97","sha1":"70962fcb906c3794955590db6060caad6ff0e64b","sha256":"2adf028fffa65e833de79ced4d5b8590d30bd911156e2948b74c04151bd203ca","sha512":"b8d54ba7727bca7bb75f598c5a85e75a209c7b89a1fe2e953bc93b17b65176d40a3db7a43c094967a78570dfb0a0ce9ff300a7a991d0acad140b5e2d1f721ddf","ssdeep":"","tlshash":"538171e9335c4abcf002abb4db053175653629e33941b058cab32e719e2111e6e7fde9","first_seen":"2025-10-21T19:27:41.910409Z","last_seen":"2025-10-21T19:27:41.910409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/feat-1.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/feat-1.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: W/\"68c02731-10ec\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRnH7VSJPIo4x1TxUAl1IbJuCGe8busInzwRSCs9EYf2izLPpzaQfTD4uwSHNQlZ7B2iMOVp6g0sGrL8YagaGB5aC5aCJbCY\"}]}\r\nvary: accept-encoding\r\ncf-ray: 992326af380ab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4332,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e8e1098fcb194b40797792afe221cae","sha1":"d93ba90525f901a9b35f3dbe6b5bd6c5beda7102","sha256":"b4a1d4c5b8bcd9584d59fe0dc4906203d77e46333c8f5621179e6b19adb2a103","sha512":"2b498bc955fd6b65eb1862e454cf66f3cf65024c373bb9569ba0ffaf897572afcc443d59125f42eb82bcdb120ec7f37af7c9973d666805fed3ae7a2e441a2399","ssdeep":"48:2JbRd1uk+4F7uWfdBrq5vz5Lc5+d7ZIgLmiLP3GI3FQJWX6ttv90xXGGC33sr69S:4+cQtzS+d7ZPLpLPZj6PvSxX1+Q","tlshash":"889144cd37340cfcf86587e9df52317da83662b72e850a40c6211e754966aad5c3bec1","first_seen":"2025-10-21T19:27:41.911865Z","last_seen":"2025-10-21T19:27:41.911865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/favicon.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:14.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/favicon.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\netag: W/\"68c02731-298\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uleYu2IdGSnEJP1uOf7tT%2Bvz%2FDs%2FNRTjhoR8rQfU%2FteWtTApO9OVgOnRY%2BS7VJK%2Bp0WzmBicSTTgAvXaWTY4zGX%2Fq%2BtnV8f3\"}]}\r\ncf-ray: 992326b12830b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"760852b57327cf69d5b6b5366616b018","sha1":"8c4af07825a2c7a19bc59c285e69ca67a60ca4b6","sha256":"d0edef0c504ae7943bf7a444e82c25c9c2d5a835bf9e2e2263422002ab798a07","sha512":"dcb85c26d50375702fbd55209d81c6a3a09bfbe259b0c2cb2ea7847f8a4c25275978a37dc2c1a5f9574d6b044d2955a301af67909926700b94c1d418b8b4d7b5","ssdeep":"","tlshash":"5d019eecb968aef4fd80d1baaf997057320704e3b5c1c5bcc9552e4eaa059d55c19084","first_seen":"2025-10-21T19:27:41.913409Z","last_seen":"2025-10-21T19:27:41.913409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/logo.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/logo.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: W/\"68c02731-1562\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXaBxu2hA48ZeUAOq30qhMEd0NndD4LBBAgVPumtLIy4vUYGb%2BTs1IXmz12rw3qfiJNnsFjxnBlCRufNPiTrfafo7l8A2Pmy\"}]}\r\nvary: accept-encoding\r\ncf-ray: 992326aeeff6b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"113bda79af7a8c25b28f38b0aa10d9a7","sha1":"111e2e595fbaf8413b21fdf9f645d63bd8ccf969","sha256":"6ab6b8f79a355d3b6783ca36c422a22c51638700f5bed255d6587310bae4d684","sha512":"852bbfad00a818b9c10d6f407604e4b47b055a8daf8af916d691d2a105ca48bd4d1f167b12bb7845bca0c96ba349d06101d124188ddfc8706ade24737d3ca1f9","ssdeep":"96:dED+HhEjggpfofluK8sYgSl4JINnma5JINnmaHat9kM2+wjwomgU7U:C+HhEhfofA/gSqLSLBwfFdcU","tlshash":"4cb194feb79882d4e205977def260466953f78fd9ded4f908228aa11be25ca44a04c42","first_seen":"2025-10-21T19:27:41.914745Z","last_seen":"2025-10-21T19:27:41.914745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/fonts/roboto-flex-latin_600.woff2","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/fonts/roboto-flex-latin_600.woff2 HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 88080\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: \"68c02731-15810\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ciLXm%2B5FyHQZ0L35Ovyzkl%2F%2Bp%2BOU3waeGv%2BWHNNOKKw07R4DUB%2F0VGOf%2BfKeKAkAuxSzsUbt%2F1%2BkRDN%2BV5Lfiw1K9dI0zkS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992326af1802b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88080,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 88080, version 1.0","md5":"d63d4fb6118f0381cfa2c1d0da42b3d0","sha1":"ea7855806011a6e3e1f0d05c3ba677ba4958600a","sha256":"3d092874102d040f93c78bee0a9d78b3506c7d6f2b99095a5b9b2226974f46f2","sha512":"60a541347cc82273f8e23d141d6cc1d274efe0beb6084fc3412bdf4a64f5ba75629c8e57cafb9bb3739f3cbf2aa6f6bd5e424a0be661c415fa629efe53af376b","ssdeep":"1536:McE/qB61of/74+pH8j87bXtRvNKtfHpFz5eCT9taHeUVQC9Dj027YjhYo:HB2w4+pccbXtRv4tzzkKmeOQCl17o","tlshash":"f78312c182368b07f0e3aa1597076691bcacf152b78ab340a21993ddb3335d35195aef","first_seen":"2023-05-10T05:45:49Z","last_seen":"2026-07-14T11:50:48.449569Z","times_seen":48,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/benef-img-1.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/benef-img-1.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: W/\"68c02731-8ea\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JQzAdNn0%2F4qzdFamG71vNLvE7oK%2F7RAZP50MiFiB2PJm8S0um%2B47s6NK1%2F0DJ47RpRaeWtR6oY4yr2lQSmsJ3k8Q5V8qGoh\"}]}\r\nvary: accept-encoding\r\ncf-ray: 992326af2807b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00170c83ab2432bc1226d9ad776b6e76","sha1":"de03f31a3bf891457726781699abaac9a055e0bb","sha256":"c2405218bf218ef4285a9ee19dec97063284f5967b7aeb2b4dac50d67f8bf86b","sha512":"c48757b8bf9d7dcb8348c5c54fbb557ec0f74da508e4ba6b6c73ec1552034b3c4964b66e06c520b8afe19db1aa325da57184da80f7519cd5e4b4ef475fba258f","ssdeep":"","tlshash":"494153c833184abcf852abb6cf067276315b15c77649a278c7f20830558529dae3fcd6","first_seen":"2025-10-21T19:27:41.917204Z","last_seen":"2025-10-21T19:27:41.917204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKQWCJ35","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtm.js?id=GTM-NKQWCJ35 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Tag Manager\r\ncontent-length: 1583\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T10:30:13.389397Z","times_seen":17706786,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":91,"dns":7,"connect":21,"send":0,"wait":32,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/favicon.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:14.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/favicon.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\netag: W/\"68c02731-298\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLbcLYJzAy2LQCHt7dzp8Cud382THFky9Gf5Vz%2FboFKO0a1VSOvkpi0R35AYXf04Ej%2Fv9v3bLeTu40DU5EUNV0c%2BvmRvC6yq\"}]}\r\ncf-ray: 992326b12831b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"760852b57327cf69d5b6b5366616b018","sha1":"8c4af07825a2c7a19bc59c285e69ca67a60ca4b6","sha256":"d0edef0c504ae7943bf7a444e82c25c9c2d5a835bf9e2e2263422002ab798a07","sha512":"dcb85c26d50375702fbd55209d81c6a3a09bfbe259b0c2cb2ea7847f8a4c25275978a37dc2c1a5f9574d6b044d2955a301af67909926700b94c1d418b8b4d7b5","ssdeep":"","tlshash":"5d019eecb968aef4fd80d1baaf997057320704e3b5c1c5bcc9552e4eaa059d55c19084","first_seen":"2025-10-21T19:27:41.913409Z","last_seen":"2025-10-21T19:27:41.913409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-21T19:27:13.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bb6cmF2TSIAtC69wZcOACLEvuCeP3A5lcvcSxzSlVKqY5MNgGPmEhCk%2BgzACZtnZywuiWUx%2BLBW%2BAvuwks%2FrK7XAxMTwvtECEPk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 992326ac9efeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":40000,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (20167)","md5":"ac52368900c1c0f750240a1053bd94b2","sha1":"5969ffe2c34d1be491fcf1561d89dd8979b3c662","sha256":"e4f4d28ef0e5b1e6b836558f99accc00b0af9ecc459cc6a940047dcba4924b8b","sha512":"3f25ae44ddbf98c7b172abefa565c57cbd0a76c377b542e1f7047ade57dc96f32746c07fd5709f00b96d81472e5ab2a0f171d5ee68d7f1e2eedd4ef01b5b599f","ssdeep":"384:GkOHhFpO1qKzVFE8+vL+smQ8BcJau9QImpNTIIUOGCOzW28QO+u:GkYPpYImpkaz","tlshash":"6703a3179a44311d7803585beee55aa4636db020f30672f6f691a6aca3ce7c016f4fcd","first_seen":"2025-10-21T19:27:41.91928Z","last_seen":"2025-10-21T19:27:41.91928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":29,"dns":11,"connect":1,"send":0,"wait":219,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/man-3.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/man-3.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: W/\"68c02731-1b10\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4XW9%2FqEhTfkfIXieHWHp8KJafFRc%2BLBaHcYs1ycR7povvQzNNfE6GKLNaTv3Q9j4TfRDnUuzQdAuFP75PMyWqZwg%2BsShLG4\"}]}\r\nvary: accept-encoding\r\ncf-ray: 992326aefff8b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc9bd3923873614980ae5ad68442a606","sha1":"f4bd10ff084c224b2792dc0cc316d535cf66841e","sha256":"13078ccd8faa1eb176c05c7de504babb5b65924114a646cff9f49b85e7a20223","sha512":"7809b488bab84c6cb1c586910228d9c2bd62e8522822771b13da9f33c4754f0892cc9c948fc57c7bda8e68d1b682e7bf1f1cf5a7e1edfd0ced44273413078711","ssdeep":"96:hM964OjE134mUcafSZCTvtO1QHUGOegnsY6KEgAnVwbdgAnVwbP9b91eHeM:hM964/3sBfTUnsYtAnTAnS9b91s/","tlshash":"c4e1a4ce37344daca88687e2ff4031b9652305a74e8e1694d4785d758dd282cae3fdc6","first_seen":"2025-10-21T19:27:41.921064Z","last_seen":"2025-10-21T19:27:41.921064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/fonts/QanelasBold.woff2","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/fonts/QanelasBold.woff2 HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27972\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: \"68c02731-6d44\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXppmnp5gmeWekMi2bsMAvov2hSAbT2kqdyFO%2FuzZaZZxAry30vXg5u2sdvtr%2FSLHyUnXyipXgDoZFVWbOlN1h9cpujo2dL6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992326af0ff9b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27972,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27972, version 1.0","md5":"93087b996f55461741ed6d3bcbc4ecdb","sha1":"ee9da64ac1134f1aa10c4f22673bb54ddc6fea70","sha256":"a595c5c87ba5d8cecdb6e60b76aab4184a478c409e03df89977e80622d44478b","sha512":"78d78a2ba79b07143acdcad91f7454750ca299865bffcab215f1962c222e97a19d2414ff19cb7c58c0c15775055fa76e9f5c23a7ced555c21fff844a70332c0e","ssdeep":"384:jK5aenJPcZ376rumNmmPMURR843wlk9ObIdaZ1A5F/SzoZ/BKQJMepf5TD6EBV5b:+aMJirjmNeURR84gl71WcRef5Bz5etYJ","tlshash":"25c2e1bba39eddd2ef9d0b57e6bf42d509e1962ab875f70318a970bc2025660d18b004","first_seen":"2025-10-21T19:27:41.922927Z","last_seen":"2025-10-21T19:27:41.922927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/fonts/roboto-flex-latin_500.woff2","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/fonts/roboto-flex-latin_500.woff2 HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 88080\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: \"68c02731-15810\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1OY%2B62gewqdtEEtpmRdNytowRKUMRXRkzkTJ9bb7Eq%2Bqn33FEa0nMQIQJSYRqpPXGdRXfRQpi%2BkmhBlEoXxqvH31W61FEV9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992326af0ffeb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88080,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 88080, version 1.0","md5":"d63d4fb6118f0381cfa2c1d0da42b3d0","sha1":"ea7855806011a6e3e1f0d05c3ba677ba4958600a","sha256":"3d092874102d040f93c78bee0a9d78b3506c7d6f2b99095a5b9b2226974f46f2","sha512":"60a541347cc82273f8e23d141d6cc1d274efe0beb6084fc3412bdf4a64f5ba75629c8e57cafb9bb3739f3cbf2aa6f6bd5e424a0be661c415fa629efe53af376b","ssdeep":"1536:McE/qB61of/74+pH8j87bXtRvNKtfHpFz5eCT9taHeUVQC9Dj027YjhYo:HB2w4+pccbXtRv4tzzkKmeOQCl17o","tlshash":"f78312c182368b07f0e3aa1597076691bcacf152b78ab340a21993ddb3335d35195aef","first_seen":"2023-05-10T05:45:49Z","last_seen":"2026-07-14T11:50:48.449569Z","times_seen":48,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exmoin.net/build/images/benef-img-2.svg","fqdn":"exmoin.net","domain":"exmoin.net","tld":"net"},"ip":{"addr":"172.67.165.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exmoin.net/","date":"2025-10-21T19:27:13.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exmoin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 21:14:03 GMT","end":"Thu, 15 Jan 2026 22:11:44 GMT"},"fingerprint":{"sha1":"A4:58:83:5F:CF:E7:84:63:4A:E2:72:C8:AA:3B:AC:07:B6:30:AA:4D","sha256":"A6:08:2D:7D:C5:4B:17:14:0A:11:18:A3:98:D4:16:7B:89:78:19:7C:A4:30:8A:F2:13:1D:13:76:74:D4:3A:F6"}}},"request":{"raw":"GET /build/images/benef-img-2.svg HTTP/1.1\r\nHost: exmoin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exmoin.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 19:27:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 09 Sep 2025 13:10:09 GMT\r\netag: W/\"68c02731-c62\"\r\ncache-control: public, max-age=84600, stale-if-error=60\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTVrG1ljDz7X4sFfS%2BDlpharU5tZJIDDI3sv2WVguOBsbnJVVfCVWIE%2BTiR4%2BoLu%2B%2BBwVOHFMSqIroqJyBe%2F7K8o2zgQErlt\"}]}\r\nvary: accept-encoding\r\ncf-ray: 992326af2808b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3170,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"820d28489be2c688652b967f28d8f230","sha1":"285f78b67a3f3329d551b7beee0e64328ba5f512","sha256":"83418f5e2f492fc6173908fe15efaa94140efb00855ded2eb11593eeb248bd71","sha512":"c4f37e78eb47abae115a58f0b1a16cff58fd2a72eef26a96fb321c273cdf5719a33c83118d1f2b48e06d931c4a61134482fa4356951b8ba1d621af33e000506d","ssdeep":"","tlshash":"ad5173d833a40bfcf841d770cb2735767a5a21fa3652ad54c2b41d71a82221d8ebbcc5","first_seen":"2025-10-21T19:27:41.924416Z","last_seen":"2025-10-21T19:27:41.924416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"exmoin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}