{"report_id":"a0fc66fa-9d27-4abb-be2e-c198cda3f5aa","version":6,"status":"done","tags":[],"date":"2026-05-27T10:07:16Z","url":{"schema":"http","addr":"chatbot.page/29DDcS","fqdn":"chatbot.page","domain":"chatbot.page","tld":"page"},"ip":{"addr":"104.21.61.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"collect.chat/r/29DDcS","fqdn":"collect.chat","domain":"collect.chat","tld":"chat"},"title":"This chatbot page is blocked","dom":{"size":7629,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"4566492afe1986690aa735c0041b3aed","sha1":"172d786df1df7c4c393b3d1cdeb0d62c890f0725","sha256":"0fb6aa966b460c078eb214d972ace25fff3b916c020850ef6588aa01947f9b5d","sha512":"cc1c2b91a6b08449b6f93a456a95b7fc787927b03cdb06f3ff9d3592a812751953d9680804642d0913914c74a3d1db6c8876dd41f0b10b16b62294e3c191eea9","ssdeep":"192:QM8G87LshtE7mEtLTeyL3sSOpFpB4Otzo4JQKL4cvM2gNJ72m6l:r8G8f+g9tLnsSOfpBJTL4cvM2k3S","tlshash":"2ef1861eb5b252a0b8774d76338e66217714d01bc52adcd9fadc1220cfc6ab65bc231e","dom_hash":"domhashd5a5163900525659cfe6d1ee25ed38bf","first_seen":"2026-05-27T10:07:17.262444Z","last_seen":"2026-05-27T10:07:17.262444Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chatbot.page/29DDcS","fqdn":"chatbot.page","domain":"chatbot.page","tld":"page"},"ip":{"addr":"104.21.61.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T10:07:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"chatbot.page","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"chatbot.page","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"chatbot.page","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chatbot.page","ip":{"addr":"104.21.61.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-13","domain_rank":254927,"first_seen":"2021-06-13T09:19:14Z","last_seen":"2026-03-06T11:29:20.114073Z","alert_count":3,"request_count":1,"received_data":1701,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"collect.chat","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-05-19","domain_rank":167051,"first_seen":"2017-07-28T06:19:33Z","last_seen":"2026-03-20T03:31:31.304978Z","alert_count":0,"request_count":2,"received_data":197198,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":1,"received_data":274617,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"503881296cd4c7c8508ce33cc7961996","sha1":"cccafbe5e60ac19ec0b8af8ec08dafd6fb6af814","sha256":"c71ef769ec67b1837e6c074983a11bf25ab6e29e34bfda83ea5dcb6c6e63c6fc","sha512":"70a4f3fbcd7ab73f2d516c2f851f649981e64f60fda8a512db46c159d5ef31c928cc6c5d90cd2b2fc03c10c74842ba421310099beeadad2de8ac61eae6e8468c","ssdeep":"3072:yATCp4OeNYxyWIy/LBPEGZKwod0PGxs3qU0Atqqh2/J9ZvCa85WiYp48Y0meqnTj:LhOw8jZ98hM/cyKqopsGvuc6","tlshash":"49441a353602a03e1fbb43da20dea004d62e6b61a65841e9f782d51f11e5af81df7f39","size":273477,"data":"","first_seen":"2026-05-09T04:15:16.158725Z","last_seen":"2026-05-28T00:42:42.194436Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chatbot.page/29DDcS","fqdn":"chatbot.page","domain":"chatbot.page","tld":"page"},"ip":{"addr":"104.21.61.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T10:06:52.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatbot.page","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 01:07:31 GMT","end":"Mon, 20 Jul 2026 02:05:14 GMT"},"fingerprint":{"sha1":"C4:ED:55:F7:40:62:9A:C9:0F:DF:00:DB:6C:3B:8B:70:F3:D4:8F:1D","sha256":"E3:33:51:DE:88:4C:FE:6F:EA:77:6F:E0:D3:66:78:05:26:03:91:D6:0A:2D:8F:28:23:20:1D:B8:57:8C:C8:C9"}}},"request":{"raw":"GET /29DDcS HTTP/1.1\r\nHost: chatbot.page\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 27 May 2026 10:06:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://collect.chat/r/29DDcS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Accept\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHSnOtxIdZAh9FL3CTDq2SkhofsPqXsmA0wAEru3QbKi9OalzQ4WD56A%2B0PxEybljkJh69iCWn%2F3XQwy1m7mbX64sSJbOf5GBBoIswsMW6yagnLuDrW25QOZzPlTEqk%3D\"}]}\r\ncf-ray: a024359818b02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T06:47:06.075238Z","times_seen":17685757,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":67,"dns":32,"connect":2,"send":0,"wait":143,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"chatbot.page","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"chatbot.page","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"chatbot.page","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect.chat/r/29DDcS","fqdn":"collect.chat","domain":"collect.chat","tld":"chat"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T10:06:52.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"collect.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 04:56:42 GMT","end":"Sun, 09 Aug 2026 05:56:30 GMT"},"fingerprint":{"sha1":"7B:0D:F7:B7:2D:FF:17:83:11:86:AA:BC:61:11:98:A7:F8:8F:AC:41","sha256":"07:05:94:18:BD:B8:85:02:B7:C0:19:90:0D:A3:32:26:B6:22:92:B1:DF:F1:C9:DB:09:A3:8E:3F:DD:B1:95:F1"}}},"request":{"raw":"GET /r/29DDcS HTTP/1.1\r\nHost: collect.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 10:06:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxNjuBq0FCDfi00DHIVqD9RTLeh4W%2BP6nmYerlyyckIiH%2FwFVIOz5S0tX25aW3a244B5GuGGoM25j1iq35319SWayteM3%2F4GluufZihk%2FdH1yimxfVnSGJ0qZDdlrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a02435996c8c76ef-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9850f9d01d97473df8eb344feaffb2af","sha1":"ba5bcf98d1dfff474134c6c616737afd8437fdb6","sha256":"670595f7ffa711fc818569dd6b0894da8fa2a16020f20c13f6a2784f95b938c9","sha512":"3a20975faca957626df3d7d6240ebd155e26a938f16238e93a1abecb527bbe1414f8c4f65c0d1b882ea49d8db15dc6c7d8e0fa76a20a8f9f78b3674e0713eadb","ssdeep":"","tlshash":"7b114465d9f159b320e385a365a0337a9e85c097c60b4085b5fc92a0efc6cc1cd933c8","first_seen":"2026-01-27T10:09:37.265637Z","last_seen":"2026-05-27T10:07:17.265176Z","times_seen":5,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":68,"dns":35,"connect":2,"send":0,"wait":226,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://collect.chat/r/29DDcS","date":"2026-05-27T10:06:52.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@tailwindcss/browser@4 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://collect.chat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 10:06:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 67130\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.3.0\r\nx-jsd-version-type: version\r\netag: W/\"42c45-zMr75eYKwZ7AuK+OwI2v1vtq+BQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230233-FRA, cache-bma-essb1270076-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 24223\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJGxfk1RPSZPAT%2FQRh%2BS75oHFXfGREXdqjx1XQTiMxxNIwYjbT8%2Bw%2Bn3JgbnD23yAPKwzUG7hOZ8%2FoXbi4%2FOErq%2FTvO0fMDTyOEwkud99X8M65RbwhwtiMNQJm2RtVZqJp8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a024359beda10731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273477,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65267)","md5":"503881296cd4c7c8508ce33cc7961996","sha1":"cccafbe5e60ac19ec0b8af8ec08dafd6fb6af814","sha256":"c71ef769ec67b1837e6c074983a11bf25ab6e29e34bfda83ea5dcb6c6e63c6fc","sha512":"70a4f3fbcd7ab73f2d516c2f851f649981e64f60fda8a512db46c159d5ef31c928cc6c5d90cd2b2fc03c10c74842ba421310099beeadad2de8ac61eae6e8468c","ssdeep":"3072:yATCp4OeNYxyWIy/LBPEGZKwod0PGxs3qU0Atqqh2/J9ZvCa85WiYp48Y0meqnTj:LhOw8jZ98hM/cyKqopsGvuc6","tlshash":"49441a353602a03e1fbb43da20dea004d62e6b61a65841e9f782d51f11e5af81df7f39","first_seen":"2026-05-09T04:15:16.158725Z","last_seen":"2026-05-28T00:42:42.194436Z","times_seen":88,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":20,"dns":5,"connect":1,"send":0,"wait":46,"receive":9,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collect.chat/favicon.ico","fqdn":"collect.chat","domain":"collect.chat","tld":"chat"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://collect.chat/r/29DDcS","date":"2026-05-27T10:06:53.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"collect.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 04:56:42 GMT","end":"Sun, 09 Aug 2026 05:56:30 GMT"},"fingerprint":{"sha1":"7B:0D:F7:B7:2D:FF:17:83:11:86:AA:BC:61:11:98:A7:F8:8F:AC:41","sha256":"07:05:94:18:BD:B8:85:02:B7:C0:19:90:0D:A3:32:26:B6:22:92:B1:DF:F1:C9:DB:09:A3:8E:3F:DD:B1:95:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: collect.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://collect.chat/r/29DDcS\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 10:06:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://collect.chat/sitemap-index.xml\u003e; rel=\"sitemap\"; type=\"application/xml\", \u003chttps://collect.chat/privacy\u003e; rel=\"privacy-policy\", \u003chttps://collect.chat/terms\u003e; rel=\"terms-of-service\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qDvwtrpsEf%2BpUAWTwjygJkasvGOpAQiK5tdOAVoTFQnDvOJUjEKc9k2%2BYv7l2Gdrc%2FQHrWaI1QQhJmab07mXotAqO%2FfS0RNb%2BbSW2D5WlprdM2wf9Qa1rRkPVYm36s%3D\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: accept-encoding\r\nlast-modified: Wed, 27 May 2026 10:06:53 GMT\r\ncontent-encoding: br\r\ncf-ray: a024359d9a4b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194547,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15001)","md5":"12a8eb19a4b33fd08c537ae8c4399ad4","sha1":"d3371c3ababfb16ecbfc7214a165b1b422423316","sha256":"128cfc187c7894b34723e5dd14ee860e71c2776d261d5c77866a31bcad161b7e","sha512":"6a341ac269efcef06ff99a0a9d6dbb878a494ca15cb5abc7e7bf05e5081edc4fe215aa53869081e15d930605e76668b4f0618c7ff3ac556de3de55869b8a0120","ssdeep":"1536:JxJFpJuvvHaoc4I0q8TwrM7784G275Yzku1HjlKhYf5OXwHXCEC7lQ5bWD+Roqu2:vIlw34re","tlshash":"571418252302087f600343faf2e0b66a6219e316cb97c6c877ad49f46fc2d65dc73699","first_seen":"2026-05-27T10:07:17.267302Z","last_seen":"2026-05-27T10:07:17.267302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}