{"report_id":"a3e23746-8e13-406e-a765-d070a3155eae","version":6,"status":"done","tags":[],"date":"2026-04-21T14:40:34Z","url":{"schema":"https","addr":"visit-getgrass.pages.dev","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"title":"Grass: Earn A Stake in the AI Revolution","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"visit-getgrass.pages.dev","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T14:40:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T14:40:09Z","timestamp":1776782409,"ip_dst":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T14:40:09.366704+0000\",\"flow_id\":902276198267583,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":60164,\"dest_ip\":\"172.66.47.139\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"visit-getgrass.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":926,\"bytes_toclient\":3555,\"start\":\"2026-04-21T14:40:09.359103+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-21","alert":"Hunting_JS_WebAssembly","trigger":"visit-getgrass.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"visit-getgrass.pages.dev","ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-06-05T19:49:25.176611Z","last_seen":"2025-06-05T19:49:25.176611Z","alert_count":24,"request_count":23,"received_data":7103944,"sent_data":11051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4eebf1db2abfe60d0c91d87608f2d9a7","sha1":"1954fb5f81cac9db19f0a3d7810c8fb7d3ad2192","sha256":"ecd4d37f50c6f42c55da402d946d3b09c5267eefebbe29eee78a009b1e7815c6","sha512":"7598d0557fed96bdcc40d793e0fc3664cc831b43d1e349d8580947c1782dc7bcd049dc69f82e2a2ae91124dad9da5c7fd1d9d22ec0e3b64fbb1d290b1a5c64b0","ssdeep":"","tlshash":"0fe02bac48e15b3420573955ea97f34e303384371107b501790c82181fe0b8b814dfcd","size":314,"data":"","first_seen":"2024-08-20T09:11:07.000195Z","last_seen":"2026-04-21T14:40:41.022657Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/2ab5d871ffbcee3b5a5b9.js","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbc4ace1ab5b07313c4322f49e1d34b9","sha1":"0834c07f6316724d9f4b5730c3baf5fe5792c9c3","sha256":"050dfd7d8fbca049ca33fd6355d4e1f4e282a4c6a8aad716058e3bbcbe633b04","sha512":"e7097c821d957916726701e404ad06b153f7b10455ad469e941381dbffdc977128c3c0760bf42f8cadb2020baa0a0f544b29bd6cef20604e84a4a70293180789","ssdeep":"24576:VlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJbeCL65Qrc59hJA1Iq:PjBXpyI6yQo7ebCNtH365Q45rFq","tlshash":"7c653339af133dbec76cd675a18f5f0e3da10a535488d9eec9a424c7c1aaf410187ca9","size":1413628,"data":"","first_seen":"2025-06-05T19:49:33.230922Z","last_seen":"2026-06-09T02:22:57.404604Z","times_seen":8,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-21","alert":"Hunting_JS_WebAssembly","trigger":"visit-getgrass.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/partner2233--2-.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /partner2233--2-.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2181640\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1c5879f1a959d4fa68b3effe3dc7b7cb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDKQtqV8MgueNgx77FWrus896EzF0nvNG9Abaml1ek53gDImzMl5AOwkK%2FEtJ6No9X4QBp%2BggN02fe59%2FEuLZHJXSNFoOdxjNKLySHqLvgLqbeJIo0HZ100%2FSP7hsX4I%2BL6xcDKltIAPWgw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246c79e856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2181640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"e284d4eff869fd9606540fe411e9e3fd","sha1":"3fd183157ae4813c5849b5bf2c1b77a9c4183b96","sha256":"7728148226ea670a3307b5eab11afba4984981941ffc8795d7390dfc3d11f4cd","sha512":"b1bfdbdfae4fec4287b1ba2c95d90f45876ccafe02c472fe837197b974cea340e0169f0be716bf254a949bc0e45abdbcb5ed3a330a67c370ebe25f7cb6586a5d","ssdeep":"24576:XaOyhZvM6SPJV/tar6y+VHgIN+T8ya7TM8Ajxg+WP3F/P9:Xa1NCJVFI+f+T8yAejxgn9","tlshash":"0f2533ec0bbaba5321a334c47d02bdbc9a545a7cedcb066ce410a5b30f71785670a5e7","first_seen":"2026-04-21T14:40:40.962234Z","last_seen":"2026-04-21T14:40:40.962234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/image-4.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:10.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /image-4.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1889\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"59fa4e52150086f4608c8b1d04851774\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7F7PkLixhRDUdW4SJJyxOz60kZVLg84YROwkKfYfIvFXaNZTOEC0V2tE3cfFCIuFoCH6BAYokY%2FA069kCXbK6DuxcRrAZp7jERaN0ccdrtdv2TbJnY7AtmIoNa5XCpTS1YOcsZYMahFkXiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246facb956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1889,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 72, 8-bit colormap, non-interlaced","md5":"70b29708cf9436b8c33df48dfd3b2987","sha1":"f0a355c4f3ac763ad6826ba8b2576ddcee99c427","sha256":"f5bdfd38329bdc6adaac9aae9c7cbb065538cbf8cd09cb9e778ac67bb64b624f","sha512":"41a65ff5320d5bdc3cbdca6e565a8e8943a337f69a167114f339ebe7b13a6c52a3ed69b16ead8ba995a97e09e29ef6f4fbbbf058f08e8b15cca56fb25c8238d7","ssdeep":"","tlshash":"a94119b0b1b08ac6938aef316f6c693a4100ac08791e0ca662efc1dc5169a1d35a8355","first_seen":"2025-01-15T05:50:07.957127Z","last_seen":"2026-06-24T16:55:59.653886Z","times_seen":25,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/favicon.ico","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:10.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sZjAGmwRZDK1WF8%2FdptwC7qh7uHrGtXQisx8Xc%2FfuvZmK80%2FiKPr7b7XXh9bPGR85eXTz4r3AoPXABjBIxta395J21i7tCk9Xxqs4u3%2BKLIVQ%2FT8gJcK27KGut10h2f66sTSURwsS3KN1M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a538fd839cdd1aa7695d23e1af745b13\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd24700cf856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6bba49c52bbbbcf5c75a8c78da001e1a","sha1":"e4bd8310bd06bd352a688f18ba01685ae2c7842a","sha256":"e38edc2b18a8c720e19f93ef43e6559a96788866b3af7a38a6d4fe6228469a26","sha512":"435609574fb4d5ffd7ba9b6e3150b7c2d8cdb54183442af90f5ad4d1b833c5de66b7a6946c5203ea130f98e24fef015d9a3a5c84a6396126bb42cb540e36a081","ssdeep":"192:m7HLujAISGu1mDdhHe+leDBxl+vZlklCWlMl3l+NldlLEql+lTVoQea:m7HMAIP++QlxsvZuMWKVoNjRo5VoQ","tlshash":"ec620388b76192f9f976f93434f12b4423b6f22dd697230f8144cda07de99c40f2a999","first_seen":"2024-03-22T01:52:37Z","last_seen":"2026-07-22T10:33:35.428744Z","times_seen":58,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/channels4_profile-1.jpg","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /channels4_profile-1.jpg HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12920\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"dea674c154de297cdd7dea43985597b6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlQfLuowJN8C2qg45sPrCsFKq8CA%2B0GsPew3CwNxCNx8l37wUxska37l2NoE21wxfhJu8n8xk95c5UUzSoLWR%2BhgCInXLY0zuncr3a01LfMUpT0EyGjlL7%2BaoKMpv1b5B1Df4JgfSpg4JhE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24706d7156a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3","md5":"4141b33a55cc59f17b2676f492b4e715","sha1":"bc89d5af0f01bc87f1089d7896efa8364a859f59","sha256":"86b2725aabe8423c0a7049ca3b45edf786290ab7711f7fc1209787c1e2aa33e7","sha512":"9159a01192e0bb8607bfdf689fd1ae4c365ccd6365e869108c3da13d6dfb12bfa8501f5558afb5700e1bbea8aca22ce989d7c22d052599a28f1f1c0e5254c1e2","ssdeep":"192:UFdhkjQIDgCtcpa8On488g82tPQv2Ay7uJhSQsxmqwdBfZ78+G62YUx:UFXk8IE2ckL488YV7P4dBBQ96W","tlshash":"0642ae89f417e67c68c1a01f6d5c9172076b05f8c53bf602b92d8cfcd7e946bca44298","first_seen":"2025-06-05T19:49:33.260919Z","last_seen":"2026-04-21T14:40:40.972618Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/0e172275e906bdebd7875e56c846cbdb1a42c326.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /0e172275e906bdebd7875e56c846cbdb1a42c326.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/www-player.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 214\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ac13ad3f6aa32f436992a99c9a2b441f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CD2zsX%2BkHQC6MQ75QH4Lb693GSNn3FnrrUdWVUkUJY7NaTqi947MvDfVhj%2FURjmGM3fgGh5VwRRgsSA4d9qN8nAd4Fl9FMGPLBdpuMRiVesjXaaq6%2FNZ5E%2BcL1bUJ2kk7E1QMYCQVYJQi5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24711df756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced","md5":"388825ad9d34e5e3c255a71ff5369b26","sha1":"0e172275e906bdebd7875e56c846cbdb1a42c326","sha256":"b79ec3853e32493190ce5cc7545de7c741f0960f5f6b7bc4dd6e155a8b67144a","sha512":"725b5590af49bbcaf8eee46a6a26d07595d9f2eac64845cab77242a83fd50fa5ceb866fcb7a10de703b6902ce8c2c3dc8d5b6729a19415b719fb61e305bf051f","ssdeep":"","tlshash":"76d097c272860c785b1a0ca2df6000208866e0800a00c1082809c364422189110c9ea6","first_seen":"2025-06-05T19:49:33.274148Z","last_seen":"2026-04-21T14:40:40.975372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-length: 15552\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e44ee65e5f0d649be2f38445cec2e7bc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48q6%2F2EWDLWSFWf7wnQCQUVaXADWIXx6aqYfDEOZQf7pM1pmEVDNhCow7QblDy1RzIUvt2McLZHSSq9R%2F1O5VPz%2Bza9LiJoPhm2KVFURRdfPq0hFvalq6dd%2FnJoVC%2B2zgwfauBaiwlUl8gQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24711dfd56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-07-24T07:14:52.551552Z","times_seen":341605,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/referral-program.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /referral-program.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 576894\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e54410f5328e0cf356dcb248b5c367e2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAWVsLN218k2vFFM3tgMj0LZXoeptpKcOQdKyL11svIRzpSOfUFFZbRVdoVc0ffacRldIp7KucFFvM3X2dVFXfh8QoCsAelnAFhRq5lVsofQxNmes43hu1A%2BqVuAcWg0qBBPlhRIpEWu7ss%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246c79e356a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3884 x 2340, 8-bit/color RGBA, non-interlaced","md5":"ad62a52f3419b1a76f421904aee9a3bc","sha1":"018d288308ce8504177c9d0e954c6898001c315d","sha256":"f6650e1753f49eefaea04624d587c2416cdd5a45d677cfb1a77726e104e2c8b7","sha512":"3a1de24dcc9850c200b2cbe74df7a3e96fb62058d55210b3f290bac89b11373f1bfb4183fdeff78ca97f6c1d76a119c8ce306e6bb99206a3ee7b7cf7273f8811","ssdeep":"12288:yUqPyYd2NH/Oa1RQEQH6YIpG1i//t/A+n+9DoG:E9cNma1RBkintoI+9D/","tlshash":"4ec4124ac853ded5cd0e153dd6bf0bceb7222136c4004afa67bcb65eee8217862561d8","first_seen":"2024-08-19T18:43:02.353758Z","last_seen":"2026-04-21T14:40:40.978731Z","times_seen":4,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/rwfedvs.jpeg","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /rwfedvs.jpeg HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 317795\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"372d0ee24376e94990d37426a87939ed\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LO5z9uSEYewh59ap7PB6QhIRB5QydAmQ3SWI8DdUnuPmM3H5%2BNju8QoqC5NHk71Or03Yk0mtStntH9vRwCM5l6bhjieLcJjy50fTZUUQuW1fzhgJE5RbszYBvrWIdggj6aKkQI%2BVHRqhJ7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246c79e456a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1080, components 3","md5":"e03cc42f97b40f727fcb9d0703386514","sha1":"f60936afcf60dd1290ca136df2c253c1efc8fda5","sha256":"8eacadc4825e066ce46be047dc52eaa69c3d72545ed8083c67d5cca8c969bc08","sha512":"8ae6c2b5e23913073e7be0d68040f65eba4faba39e926a6ca000db222fc568059c4e82150fbbf098d93cae0e9f19ec34a28a1f7b4420d13e2e58f5c78c29d1c5","ssdeep":"6144:m+xxq3LEUdRwzTDCxcwBWSibBruAF+1R28icsSBr431OxazVIIDCo+5aM99z:1TQLEUdmD3wqB/cxfOHLH+wQ9z","tlshash":"c36423cbfe74a292c198547ecbe64e5783114c883d8b83268c7ee887f65d2c5ab131d0","first_seen":"2025-06-05T19:49:33.268556Z","last_seen":"2026-04-21T14:40:40.979445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/index_1.html","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:10.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-length: 0\r\nlocation: /index_1\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQJAFypfMYPQi95UkPpJcVtnJCjrvp9ijd8WO1eiBADjQBfH15n94vnpK%2FUMjr4AdWQBvzdoKiJh%2FY%2BNNcvQTqbmQJDrfIXJyFTl%2F8dEMKAd8uLNwxWpQmr%2BrzxGgu%2B392eoVPqoN1VypU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246ebc1256a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58405,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53450)","md5":"f89d7f5d4674cd1262e2da8593fd0246","sha1":"f447e89bab371dbcbffdd7a18cfb3a16636c17ff","sha256":"07b5fb23ef2e2ee406132db3c505aa39ded6ea2c835b40f388ed798347102ec7","sha512":"3c03ec0329dbb7b355bc5cc4a4ff5c396d7eba3dd5fd85782bba5a22d8428290d928210c284e9a0e1027eff950ab0adcc69ce25462a28b972b6419371e11240a","ssdeep":"1536:6K2/JgfZssns5sWsAsVszsssysTslsCsMsRsvsIOzNh1/cIhhE:2/JdeuvLUY9dKKbHQEZOTE","tlshash":"e443c8f1c3500236c1870fc474a9633e32a7968fea835c51abb973e45be7da8e8d6544","first_seen":"2025-06-05T19:49:33.225549Z","last_seen":"2026-04-21T14:40:40.981246Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/channels4_profile.jpg","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /channels4_profile.jpg HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3099\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"85e2667c989fc52b7bf3f2f774b295d8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2z5oPuNosd3IxsHWHa%2B%2FfsJjtafvsvC1o3A1KKkuu%2BiMRE%2BhR69SX4Wc6K2RTL2WOsQe7Y%2F0ytJ%2FdfOwbcRQZQkhczhfxmVqP2zoXxk3FgHs9LqowZFDyUw0vIgPPlUH4n%2BJ%2FpsRw4k1Lw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24706d6e56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3099,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 88x88, components 3","md5":"99f2b8eaf443b9a95f11ca0d087738fb","sha1":"1419ae2f9b0a20d234acdb8b14d18f29b0c0e00a","sha256":"f27bd8990b14788d0c4ad37202eb72af66ea5165e7c21cb6f309733e3c0173e8","sha512":"63848c2ab80d315e465d4c8d0291003c5cd074d8a84f39b5563886fc4d6ed4b22ebe3f7ce10785f4b14821f572d364a02c6d45bcb2722a0fe18a5968d349e527","ssdeep":"","tlshash":"ca517d6c3376c21ddb42f93452e206b38f89a6c0e1661fee75a59553a31fca2cd20704","first_seen":"2025-06-05T19:49:33.247637Z","last_seen":"2026-04-21T14:40:40.983744Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/c874ce3b856a89c07a358b2e3ea104eec0a47b56.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /c874ce3b856a89c07a358b2e3ea104eec0a47b56.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 247\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"68ff57cc831af7127a15394652d1a2ae\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJkuTVnqgMiehflnVTWeoAjx%2Fhk6LZPEhDR3REZMNwuNZJu2tvODnMh746Dsxrlowezn7XbwnnQqQpdLKce3uNLbLnxBF%2FDDOii3WVUjzMCJ9eSPrOoWrDjCln8j%2FbIOjYAf%2BxBolS77AqA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24707d7b56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 4-bit colormap, non-interlaced","md5":"0ccd86882041431a1b076221f200100f","sha1":"c874ce3b856a89c07a358b2e3ea104eec0a47b56","sha256":"9c3b2179e796ef808ce3a316532f52af1b56978cd6749e8742a6dce491cdb8b7","sha512":"8166d216eb165ba0b48c62c5c35803d23153a78db5417bfb029ec4610b081bc91031d784a146032b38b344c1884fa0b92aa77c1f211c41a8715d6d2d2f8c9990","ssdeep":"","tlshash":"37d023d3550c7d64cc2f363a83219947ff73152719756d4e9c19f9180a45354c282141","first_seen":"2025-06-05T19:49:33.250327Z","last_seen":"2026-04-21T14:40:40.985454Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/3dc46b64850bac5b1c4ffe5cb98511b52786c245.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /3dc46b64850bac5b1c4ffe5cb98511b52786c245.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 368\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c8bed4f18491c236e4aa53f1db228ae1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVImBiPQGwVXVUPPwRrqHMDAoKDpn1guQxR7gTg%2BWsSfDWR99dXw6DECFcpzoSeuOKNWNg9v6Yf%2BB2%2BWUcyS1jx2CKMqNxN%2Fn5ItQiH3V8YKVPz3fWqrP0ozNAz%2B6ENPKC4QGFV4hZUHRr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24707d7f56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 258, 8-bit/color RGBA, non-interlaced","md5":"b2e9456a434d5e3e6c8b039ac10b05ec","sha1":"3dc46b64850bac5b1c4ffe5cb98511b52786c245","sha256":"f154fd520865404b9edb86e7aa3941aa3273b77a83c47198c018b8d5611e3163","sha512":"216833b6266db92fa50c697c2e6816ac32edc86e040ae6ebdb1c814eca5382f3c30de594a9e18917e55f1a547774cdc56508f8b794a01839acc6fc93d1b4c64e","ssdeep":"","tlshash":"01e0c007b3382d36eac7e5a59068b85788f3a69e244f13ba190081aec5ecf0a05d6643","first_seen":"2025-06-05T19:49:33.276171Z","last_seen":"2026-04-21T14:40:40.986813Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T14:40:09.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxkiQOURP3c1cKi95gSfNw804IjEStqbtaj%2FzuIoU4cllsVNasEkGAGlzSoN14Yomn8TlaZYuV2JaNgwzJvrcaI%2B%2BuqWPMFWQFR2syX973HBKTJ%2BCURagtAxeJHdSITjllyjfhRFFk6B%2BzA%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd246aa89a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346492,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16651)","md5":"8a2a5253ffc4123647f5e666ceb4767d","sha1":"3a25c51041eccf765c3fb9a5f884051336c0e9ee","sha256":"04b5f36e126bf59be883d3168e0bffb176ca82e52c5f17b4783ea58d0d3174b4","sha512":"8cf47e5e3cbed0a133afa4fe16888221b8cd54291d5a69f23760c81fc263c515f96977937178a37401af8c3b2213dc22a90cdb490cbf68551fbf013b258f7abe","ssdeep":"3072:P684Ngru68rjvH02O1YMv61ZoKUC0OKaDf9aKDJK9V0yd:P6xNjrjvH02O1YZKdaBtDJK9x","tlshash":"9c74a49a5a21a2bc4c27dd4583785a395228f407ad515bdab7fc42b0cfdbff0042ae47","first_seen":"2025-06-05T19:49:33.256313Z","last_seen":"2026-04-21T14:40:41.002436Z","times_seen":3,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":61,"dns":43,"connect":1,"send":0,"wait":161,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/2ab5d871ffbcee3b5a5b9.js","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /2ab5d871ffbcee3b5a5b9.js HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNZSJwikysM1OQ2fa4dA2qNrtZN03WQoYZ%2F5CSA4R752FpeSZsqpaG2tBR%2Fe7eS8vE1SC%2BpSeA%2FNInB2zxdjpafmthB2MoJz9Jwly9x7iqLW3X13Qp5BFjL47kFwo7LxzWcRPq%2Fd4KqP8rw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fa249be2f1cc8e463e4682fb688ef178\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd246c79df56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1413628,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63706)","md5":"507e4ca4857bc2048fae851d325d8b33","sha1":"3e77baad979e1e39eb1b709033f0e8c042446ff8","sha256":"6a87ad3b41f96d8e8ab8942b7e15d4325a5c0b042fa324c35080a8bc5ffb66a6","sha512":"2fc720a9bf0a674bfa85cd6d08e7d83c3eece03f0ec61cf0d713457d34af61e6edd3695204d61b48300c55c3f9c85b508b1342c95b4ff9fcf4a344db64fbecb2","ssdeep":"24576:VlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJbeCu:PjBXpyI6yQo7ebCNtHy","tlshash":"00253339df533ebecbacd37bd14b0b0e3d650e235489c8edd9a820d7816ae418599c58","first_seen":"2025-10-19T08:56:35.589225Z","last_seen":"2026-06-09T02:22:57.394081Z","times_seen":7,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-21","alert":"Hunting_JS_WebAssembly","trigger":"visit-getgrass.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/index_1","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:10.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /index_1 HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdY9U%2FTxZq4FSHASitJb%2Bn%2FseGzsL5OmIcFf1b1euv9Uuv1gLHSh6JpEXQ1VU7JyKpWKenLos8krfwUAdGEOnR%2FAp%2FUaS%2FkYPPbm9N7mdWvbm4K0JIIBDyN6j7nmesH2qVzBDTThwRagCHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd246f2c5656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58405,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53450)","md5":"f89d7f5d4674cd1262e2da8593fd0246","sha1":"f447e89bab371dbcbffdd7a18cfb3a16636c17ff","sha256":"07b5fb23ef2e2ee406132db3c505aa39ded6ea2c835b40f388ed798347102ec7","sha512":"3c03ec0329dbb7b355bc5cc4a4ff5c396d7eba3dd5fd85782bba5a22d8428290d928210c284e9a0e1027eff950ab0adcc69ce25462a28b972b6419371e11240a","ssdeep":"1536:6K2/JgfZssns5sWsAsVszsssysTslsCsMsRsvsIOzNh1/cIhhE:2/JdeuvLUY9dKKbHQEZOTE","tlshash":"e443c8f1c3500236c1870fc474a9633e32a7968fea835c51abb973e45be7da8e8d6544","first_seen":"2025-06-05T19:49:33.225549Z","last_seen":"2026-04-21T14:40:40.981246Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/www-player.css","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /www-player.css HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3GIQk6Md0%2B3lZTTI4JEMP%2BC8MLXZid4M0qjjQAnfHLDWQYOEIR8No1aCgy%2FtJfDfaUYlECUL2hG8hSRxvtq8x%2B7cwphjwt8m8QOPoR%2F6mCwP7ZhhFI5X%2BCBUHhjR9r7pVDXUs7vMB7B4C4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c61604ba80fbe99e172dc89ee3cea49a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd246fccce56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354252,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0245dd92c440086bef46af74f58f7cf5","sha1":"9986254bef7931e2448d0a47031331aadde1f333","sha256":"d113a9097e9a1e92b76fc91cddc20b94756bf170b035566b1921d8146dc605ea","sha512":"76c2e47372f05cec54517908b5fe28d40123a0c97eb0577b96f31158f442db382fd5a6169d293e4f691a4b2c3fceec2c70678243e90d4ea38bb82c6f96baab36","ssdeep":"1536:Xoi8ZHMCbS/SgV/BZILJPptpJKzEMk+MOn4y2Ox5juDEnXrDJc7MsByDCAd686FK:Xoi8ZiSg1B4aufnfcKaN","tlshash":"0674c932f590123cf22b9d9997d5964c7339d983e2e21affe11161ebcbc7285136720a","first_seen":"2025-06-05T19:49:33.221354Z","last_seen":"2026-04-21T14:40:41.006784Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/maxresdefault.jpg","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /maxresdefault.jpg HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 148404\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5a1f2dee13dcecd42df7641570670f7f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FR9B%2FboEkXfyu35xr9K9nyfr5Md413eZJGBXdI6TOb4yAzBP4XimURsWKiPt3F8%2FYbXcJRFBhk6bCJWWpGsfSGKezxHkVXNhi%2FumrvYKid0EYfAtdASzzlX2KjUvkAwd5L%2BqZnj%2FIpAPsWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24706d7656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148404,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"2ecb999ab403c56f6eab2ad7a906e46a","sha1":"b2c61a3d7fce9d03fea81dea9e70948299bd0f4e","sha256":"487c5d92687538268c53deece0e3f8c2b5574cc9506b0a2dabbd756222115fa1","sha512":"970dc5eca8ef436396a2ce188a4ddeae30f206f337ece5bde76c9457e7bee7da0a6706869cd100a5f13750a69564ad088926e6b1ece616f8afdb6339c4ab0b22","ssdeep":"3072:HRswchvOlqddr25oVSj3/bhaOcYdwVngGy2GZhb:xhItdBGoo0nqwVfy2i","tlshash":"f6e312cef5ceade89d6f4552df2490d7a7834ed78d63023a752bf28588630903600e7a","first_seen":"2025-06-05T19:49:33.25272Z","last_seen":"2026-04-21T14:40:41.009431Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://visit-getgrass.pages.dev/index_1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-length: 15344\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"599b26996f69841c1206bc1fa25e82e6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ChPHzRrvNDFKuJoTrhU0iolwfTA%2B%2B1DKG%2Fj2p%2FgBSnW%2FgyKQD5QEGrjZKim5glqr7krx2oSd2K1Egl8XbF5K96Cm8NOuFcM0Wb24Onw1NvQzRaorcXN9dE8pXqx%2Bj9cRRjAQcI4r7qZAik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd24707d8656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:14:52.550904Z","times_seen":544127,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/e70eb293e0864b8ebcd467e662211a778f5fd930.svg","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/index_1","date":"2026-04-21T14:40:10.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /e70eb293e0864b8ebcd467e662211a778f5fd930.svg HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/www-player.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:10 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ml2hamMTUQoY%2BytFTQKXmpGt8Td46dPsI0cmYyz4zyn09nlFCxkWCpFkq8YUoThu6GhgN7pq9RAwXM2X%2Be3f4cCNfkjzHVQXAWB%2BmwBtMJv%2BxjAmBFytWjPCQEjg1y3KoceouX%2Bc7xTae5g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a0b21e98cf27d90da76bbdb12611e8c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd24711df656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2217eb4acf106b973f76116f3a118983","sha1":"e70eb293e0864b8ebcd467e662211a778f5fd930","sha256":"f102c7c16752988a1bb0b193298c59500fbfa058a8366373c50e2b460bd7e858","sha512":"6605d68bf6b8e8645c8bb2e9f9482687c5896c0b3044ab47b731f33f67b78d1e0e7a260c2e4f7e7bbe4ed3b97358351a5756f0840c67d1dc11dec76d7fc5fd96","ssdeep":"","tlshash":"37f024aa9fd5072cda99e6500614a0c1364560a0a4bdf39ced832a1145096fb90bbdb5","first_seen":"2023-11-13T04:07:30Z","last_seen":"2026-06-21T03:44:54.271703Z","times_seen":165,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/11e9fe9063b066a2.css","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /11e9fe9063b066a2.css HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKQnILDZu1FZTo51c9Zh60N7IzGsUw6w0yhD1uVNqWKx2f6Gby94O6foQFwsYHJUJ0RChRH1TINvKIZJCwpqzosxwuYhGaKrHxnUTlea3KNaKzTH%2BbjCbqmpnuqs8GoGfeTq7c3cBVvdMjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"00d75cd1135cb3cc6580e85c3bdd2fac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9efd246c79e056a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8624,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8611), with no line terminators","md5":"21fe0ce7649dce0a980e4a80aaf4b797","sha1":"48a912696eba433ef822bd82c79054c3df9b6e4f","sha256":"2a14d7b3c477b95a719c53c1dd6c1475f521cbd1b7c435324dfeef0e93a07246","sha512":"268aeea750fab19a9bfcafc09a234206e24377eb3dd0f775046bd3820452b8f4670bb8194840e16a23a1068c79d24471760fab6bddf966688599fddeaa576922","ssdeep":"96:ltusAynzyIgtHkpv5fzJVN/5oxzipdpnqeu5JTq3bPTq3FjPb3MFh9Y:lAOnGIgtHkv5flnt2TR","tlshash":"6b024218014a150a4857c222adc39b8530efbc12a9760fe9f66f5319c6ce1ed1fe9f9d","first_seen":"2025-06-05T19:49:33.27837Z","last_seen":"2026-04-21T14:40:41.014396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/Progress-Update-2.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /Progress-Update-2.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 499435\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"24d6c3fdaf3467830894fbae0f0f53d9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FCQZkQUs6v3oZ3auEtRHaI7wRZTnWxTmbsA8GfhLk%2BNiS20kCVT%2BVUyYJVNB70LwVqnkrVxYtDJ96PCWpBk8VoN2gHtAavXfEREYgf0puvN63wRcTzR98TjpzjSq5e4AGidVAglmYygjt4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246c79e556a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1456 x 816, 8-bit/color RGBA, non-interlaced","md5":"62b04d591e2f8329d806d8124d101f36","sha1":"29f24a91e54e500cd00d94157fd648ad7f03b022","sha256":"3df3def1f0984b914613f17f2d44a623f5e2f3d17867fd1d913d5c02683e2938","sha512":"7eca5017a1d83638481095484fa237c47b0326579b00111d307c44bc95c0400ccde84e7d3cb11d6b7ccf98ce7307b15497b8b6cb9eb2b34c9d7604f59d6e8280","ssdeep":"12288:k+P59YlDqSaqWAEhKtdgIvr6HrW/hJNME5CYHsnu:VQvYhEdgIv4rWhhMnu","tlshash":"84b423c03f61a216e1bc8a7d74c379336cf7aed9637041491fa2792786b4192361b86f","first_seen":"2025-06-05T19:49:33.258662Z","last_seen":"2026-04-21T14:40:41.017412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/join-grass-background.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /join-grass-background.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 903690\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a7286f092632ad8c46b5e5e50ae2d96e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptGyU2Hvv5%2FCJjarcZ6Fuz%2B39bBj8IiFmLsAAEuzyPtKYRkpLuXLxT4enBXUT1lBkB3Fe%2Bl6p1rj%2F8rW3PNzpArmVlcdUZEYgQ00NqzoFeADz9yegqVVwdw8n0hJMDWogP9o7Y8jH5egmYo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246c79ea56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":903690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1248 x 700, 8-bit/color RGBA, non-interlaced","md5":"bc51b96c9b911448033fa535949e8e65","sha1":"9927b0f6c751141abfeed6f3b8ed645d359919dd","sha256":"eaec3972af904e28d1956ccaddbf3288daba30d0f68acaee3b824c5c3a4100ee","sha512":"8059568887ee67bec35e6d04adea19202df2ac13db24b8a1eae216347ec4dde60f230f23b969ea075da33e9794567227cf61cc84a63198d9608fb4c5b195c9e7","ssdeep":"24576:jbxSlBKee0oWCzs0HOTTx0CWWQPequY211cohuZbZHGz96N:j9CNIo0Hc2C+PeqsTpQZbl","tlshash":"2b1533c06aa9a7b5c0c57d2bb32a35727e48cb45e54dbefca53fb600184d17d68e188c","first_seen":"2024-08-19T18:43:02.353116Z","last_seen":"2026-04-21T14:40:41.020705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visit-getgrass.pages.dev/image-63.png","fqdn":"visit-getgrass.pages.dev","domain":"visit-getgrass.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://visit-getgrass.pages.dev/","date":"2026-04-21T14:40:09.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visit-getgrass.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Apr 2026 07:58:35 GMT","end":"Tue, 14 Jul 2026 08:58:29 GMT"},"fingerprint":{"sha1":"59:DA:BD:78:99:89:02:62:B7:C9:BB:9F:31:9C:96:CC:41:D4:3E:21","sha256":"DD:29:E6:B4:85:2E:C1:F7:24:B8:CF:D7:82:D7:39:A6:10:D1:87:38:EE:0B:CE:43:46:D5:62:4F:42:DE:D0:3A"}}},"request":{"raw":"GET /image-63.png HTTP/1.1\r\nHost: visit-getgrass.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://visit-getgrass.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 14:40:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 153128\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b72f9a4b70a5ddeba1fd3b4687efd9f4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UONP%2B8sPp82ASqM29cPEyhlyAliUTB6NJf4NRytBSdWTbkFceChLNuk%2FgleTk11wKJFdzXGogkrgRX5fWOvSU4O5yWrCge3TtolJWJEVHH2aszeVaKxd1zPTfKJsSKIWMwYbuUKhpG4zB4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9efd246c79e256a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153128,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1157, 8-bit colormap, non-interlaced","md5":"0d56d02642c5afb59ee9b78c41e911ed","sha1":"bd438f1540863593858cc7fb29063b70c6251be5","sha256":"8f60982d13cfa27fdf4b8370f292de10f8aa9d6cf62eaa9ebece7cad3b26a85c","sha512":"4212bd9dd0076ff14ff2e8232595c7a0314859f95d1beae7983cac202965021b12313e22bd25da80343778b7cb4e2ff69c7d76bb65d766635ff7440f1edeb267","ssdeep":"3072:JUmEVUlGej4lCiiyTsRjFq5h4BYR18LEwPK70fTjUlamL3y/zXonQLj:Cs44ws+aYL5AfaRL3y/zXo2j","tlshash":"41e312cfb01116db7dbaa2237507c3f79e2ba06415920a456ecb75d1080dded8cd8b6e","first_seen":"2024-08-19T18:43:02.35244Z","last_seen":"2026-04-21T14:40:41.021689Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"visit-getgrass.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}