{"report_id":"a446d6fb-8123-4038-87ad-a20d629d593f","version":6,"status":"done","tags":[],"date":"2026-02-14T04:03:54Z","url":{"schema":"https","addr":"haltprizeatbaiust.com/","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"haltprizeatbaiust.com/","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"title":"Hult Prize at BAIUST | Unlimited 2025 Challenge","dom":{"size":30294,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12459)","md5":"b1dfa43aff04d14b016878496652f7ed","sha1":"6f6321a23268372582338eccd718952498c4b88b","sha256":"518e4ef5bdc1d2da151d861ff299f7d311b18a46cb7e4affc8e59da8eb9daf95","sha512":"50a28d0ed529f3e68d2bd5e8748ad12f5e674ca46ba542c6876973f0795eb2b68763c48f1202458a79d1b53c1190f737cdc8e2c4e6e7d46a3f537119bfa2f5fd","ssdeep":"384:iCqJhL7K0u50ar/zzR9mzDfoMGcIQtijYeVEunCoifHj0:i9JhnrIR9aec7y6unCoh","tlshash":"dcd2b62561e0047b6d9384f6e6c17f58ba68e6c3ca1bd7e9fadc41416fceda14d13208","dom_hash":"domhash741002389518e7e576125cb280927a95","first_seen":"2026-02-13T14:06:46.565962Z","last_seen":"2026-02-14T04:03:58.649617Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"haltprizeatbaiust.com/","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:03:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"haltprizeatbaiust.com","ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-02-13T14:06:40.687001Z","last_seen":"2026-02-13T14:06:40.687001Z","alert_count":15,"request_count":15,"received_data":2036783,"sent_data":7340,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":2,"received_data":56140,"sent_data":1140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-09T04:02:06.96467Z","alert_count":0,"request_count":2,"received_data":815947,"sent_data":834,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":5798,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-14T21:42:41.40355Z","times_seen":49177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd3ec145dc3b1c27d2cda7e7eadbe5df","sha1":"ea448878d3fabbf3d8c89013749e88a811b9928f","sha256":"52dc6c067cf73cfc1b0ee25b3855c508986758d2a421dbf173d752aa3698f70e","sha512":"162a16451a31b3c95e9e2d2fc632a6ea4e6a306651d2fc532c3e36d782e7552c5e94cd29501133c99b0df92ed33a202f12128f6f81811732b7e870d14fc6ce28","ssdeep":"","tlshash":"e411d6be33621811fa5f34c717125724201ef303b963c1c97a3d4a904f88695d6afbc8","size":890,"data":"","first_seen":"2026-02-13T14:06:46.615163Z","last_seen":"2026-02-14T04:03:58.694721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314909_6_20260125_101401_0005.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314909_6_20260125_101401_0005.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:21:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 122888\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"53fec534b97463db1e577cd04fcafc39","sha1":"8d3d2ac3274c461a9df2275960f3dd84bc5e3d0b","sha256":"2a8609147fc07b315b3295c709139902a7b9e2785df42f3bfc431e11c29adde5","sha512":"bef8fdecd90936d9c9672f4a8aba81a93ae6b8c1f36d1fa07079f6ff81f54d796f584444c142a42649f76bdfc50f835e08bb507b556713dfb2b48d181e039811","ssdeep":"3072:zLnj69otSYsblm/h+rtTp3eztx44Z0wd8Uwix:HnXogsBpwx44HdHwix","tlshash":"23c3e08fdc22d325e8c2fb70b4383602780717e952952eb57b1ea7d4cb46e8a5a335c5","first_seen":"2026-02-13T14:06:46.603086Z","last_seen":"2026-02-14T04:03:58.65647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769315148_7_20260125_101401_0006.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769315148_7_20260125_101401_0006.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:25:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 144419\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"090e5a3170170ce13b6f2d001b667c77","sha1":"2d9e0c701c4c564d7d92ea3f367cb9a9fbaabe38","sha256":"4aeca0809793cff3476f68070a24b88b52861a85e9db9ee59eae83edead9ea36","sha512":"efd90555f2e8e48811cb92b8968121666c4904c3f38d90fe7287ce9c90ba135621a81ec8166450c2b49fc2d97c010cf4661a7d12d1d08324cf3a3946fb38f38f","ssdeep":"3072:GJT+zga2cjEUhtjW3XkZSjHnN6AMbDaDTRvq:GZcjEUDi30071MbDc4","tlshash":"a0e3f15b8d62c3e2c8d5b363e6c37443ba49460988c19f34374e8b85df16bde08176ea","first_seen":"2026-02-13T14:06:46.605346Z","last_seen":"2026-02-14T04:03:58.659927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/favicon.ico","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:34.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Feb 2026 04:03:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-14T21:38:02.532712Z","times_seen":149588,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314598_9_20260125_101401_0008.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314598_9_20260125_101401_0008.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:16:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91917\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"5f59949ad48353ea772ae0a06f465b6f","sha1":"0634fd3bcedfb99ffe63c060d50acf6524db6f38","sha256":"6b72c21fbd998d6dd61250c96637d97c418f398d23f742be05a0ef4bcb7cca69","sha512":"b678e3f5c2c35b590adbdd0bee171f6a0755569000c9bbca572da7a6e6ef6c32ff1fcf13f69bfd43753df4b563d05e7de936731736c36df811e767154f379258","ssdeep":"1536:1BTey8p9XbGaiVltIDSrtSiA4n8Pjk2xBu6wCLAsRyeJtP3QYZpkf:HTH8p9X3UlnSvPjkMA6RAsRyeJl3QYZO","tlshash":"d193dfcedd6bc7b2c4c0b731a5423a927d4507c801943f39734e37a1db91a9a2077aea","first_seen":"2026-02-13T14:06:46.59862Z","last_seen":"2026-02-14T04:03:58.665024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314638_11_20260125_101401_0010.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314638_11_20260125_101401_0010.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:17:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41072\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"12bb30f89faf9536b4401c7b1a338ad6","sha1":"d4af43a68a12ce571996178985e2dc54233c6c1c","sha256":"a06cade46dc808d54568d8e0f929eba65503adcf0daab977e7534c8683d6bb50","sha512":"384db39c1d7b62659045a5cd5e8f34bc4065274ff424c069744e3b89e043987eba70b97564a1e6dca0f55250480389568ec63a91aa79e078088e3f4500990f6a","ssdeep":"768:UQrC9g3Xjadl8tm/lLmXviDDyPB5ihlWUHZSwg:UQrCSedl8+pmXviDmp5ihlL5Swg","tlshash":"84035a8acc72c3a5c5d9bb31a899341279990bc994d12f65b75f77d0cf42bca183b0d2","first_seen":"2026-02-13T14:06:46.573186Z","last_seen":"2026-02-14T04:03:58.667676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314699_3_20260125_101401_0002.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314699_3_20260125_101401_0002.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:18:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103071\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"4a5583ef2b3646fd65fae73dbf7c2c9c","sha1":"4aaaebfc04a218c6344f1f14dcf41b30261ede01","sha256":"f21da4a6d39e86d4b82df09da921cd1550c2c062672b387c8640af651a62d148","sha512":"48fb8b4f85908f3a6a67a774757a0e73d4fdc1d0c53a739418cf238d589036af44efacc6f5e91cf54ea053717b47e96dd04843a8e7aff74c4b7d645091f9d34d","ssdeep":"3072:reraoBofioer9/FmHFkS73r9tWMDynD9XuLWl:rS+89/FmlF9tjynD9XuLWl","tlshash":"97a3dfaeccb2c762d4d5bf21e88138513926538a84c46f70378ea795c703bea54376da","first_seen":"2026-02-13T14:06:46.611649Z","last_seen":"2026-02-14T04:03:58.670372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314778_15_20260125_101402_0014.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314778_15_20260125_101402_0014.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 295882\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":295882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"ab419a713d7bfdad53ca410e251b1e46","sha1":"016f087117ab7603ecf8c7cf34c6156b75b41288","sha256":"6fec31ae1faf432d6bceeddf0b4782c3305c4f5476a65b78501ffc72afc8734e","sha512":"f1ae88dd8c8f64910911d0cbea082b5492ca550b8edb2282e821c31e08eaf71a2c30003ee2161457810fbd266725e5768fa48618bdf2d41ecec7ca4604bc0beb","ssdeep":"6144:Tifm/P33dKORhKs5zKDEtmuMrwmFbMXDhW2rndo:2fG3nr0fUm0DhtBo","tlshash":"a0542381da6b024ccee1ffb5e0964d0126310cd4d5ab1bb8724f3b45e712b9d2973b89","first_seen":"2026-02-13T14:06:46.599635Z","last_seen":"2026-02-14T04:03:58.672937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314867_4_20260125_101401_0003.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314867_4_20260125_101401_0003.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:21:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 260862\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":260862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"8b4d7ff7106c8b674750baa252d35f09","sha1":"59434b934b909558d990db8a50a89f5d47592bcf","sha256":"abb3640025a9af5f290ca8032104dc1702cee04d4ff4b3e1a13e589c14c0c87d","sha512":"13709ec78dd43833693142ff385f680c31232dc069b5c46987252fce1a587a1ae61be5d37863a3abcbc753be0b492415975cb7baf37328ddf40f01488c6a8854","ssdeep":"6144:vjOnygovwN+AyByLFQ9KwZarS7RYK1flLXFnrmTUfbL:vjOnygoPApLFLJoV9LXdqTW3","tlshash":"564412dadc7a8bf1d7d13fa198803e016a1b05a894201fb5b34d9365df417ab42236ef","first_seen":"2026-02-13T14:06:46.579967Z","last_seen":"2026-02-14T04:03:58.675413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314889_5_20260125_101401_0004.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314889_5_20260125_101401_0004.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:21:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 325433\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":325433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"1bb3cecaabcffbe891022240b000b965","sha1":"ec6ba3229cd89e3a4941aba8b462736993112cca","sha256":"1925c434045590392469992643b051ad6d5d279aa18afe1d2a4f1b1aaba5ed4a","sha512":"9860a35aff4775e27d5a2b42573c493985fbb47c0b6ce467d0d42cf803faafdc4e67730d52e81e54f280d621501f02cf32916b3855ff179aff942383d5157e68","ssdeep":"6144:ACqKNSPe4BNRJk4Py17sqlVlBmnyGkJmzEl8QsktQFMPXi4nQck:AfKNK7KFpnjDYzEl8qtQF8i5ck","tlshash":"2064230f8d7dbb62e510bab08182ec46740c5472d42a8e97371ef776df726201c6e66b","first_seen":"2026-02-13T14:06:46.613105Z","last_seen":"2026-02-14T04:03:58.677654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://haltprizeatbaiust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 21:05:30 GMT\r\nexpires: Sat, 13 Feb 2027 21:05:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 25084\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T20:26:24.499323Z","times_seen":20336,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":150,"dns":1,"connect":31,"send":0,"wait":29,"receive":28,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314480_1_20260125_101401_0000.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314480_1_20260125_101401_0000.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:14:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106228\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"a48d3df4402e4ce3e8b1822868668b17","sha1":"4a83aa73d5b2bfd7c4fcd1c8d7acae30cd5e804f","sha256":"6aa24bd549af21e0aecf8dd3689d34d2793c01ab33f25fd6a32411ce36cf29b5","sha512":"dacb5d07c56cf9e388277e5125b112a0fa1a065a877d8bf46f75060ef1d13d9e9433c3d3ed388fbde83827f954829ce93670bc54f723bd0b3959f289f712df28","ssdeep":"1536:yPRzh+oMA03SJynyEaKZP7usbOmXPWuOQjAZSHO/nioMjn3Wi4Zu5R:Yh+e03MQKGOmHhjAZmO/nioMj14ZKR","tlshash":"54a3df9edc23eba5d4e4ff71e85030167c56029a60882f707b6f6761db42a8e247b4c7","first_seen":"2026-02-13T14:06:46.567663Z","last_seen":"2026-02-14T04:03:58.68076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314932_10_20260125_101401_0009.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314932_10_20260125_101401_0009.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 234077\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":234077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"d61cee0a8200711a42929d50d66fe197","sha1":"b8a797cf04a329d7784b4cde3f7f975a581f6173","sha256":"a19387889bc08fa3c21db0558f2ecac4a80c1048889ede750042b88749a2c96e","sha512":"530e60210c8691a546578aef15bf431bc9904eec3fe17539882a3a5f19d98d2e268dce23447a62c0c5f94125b359319ac8783f1ab1a6cb986a46439b1a91ec2c","ssdeep":"3072:jf21IvV3z0Grj1aPTrVPG2ABKrrOtECnQqioPhK0kZFJBDXQbzTv0B3pU6Hk+mu0:7LVz5adG2A0W5i8hKdDjwTv0I6HkLu0","tlshash":"603402ebdcb9d391f1c2bb04a05631426c9d16c965d12f74370e2790cb13fea98a7ac6","first_seen":"2026-02-13T14:06:46.581765Z","last_seen":"2026-02-14T04:03:58.68272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::pq8ks-1771041732974-03ee5cf695cb\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 80\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2%2FAmQXtUj3R6GYqS4NaBvQ2%2B2gGtlBB9OWAJFUl8FeG00pWELPk2nbtZx0xfYzbXvJa5jyZWFTd91P0D9xC48F%2FjbtAHDqg8fxjiNYxWBr%2BjA%3D%3D\"}]}\r\ncf-ray: 9cd9ad24c98335a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":19,"dns":21,"connect":1,"send":0,"wait":4,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 04:03:33 GMT\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5112,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7ea0d1e91d063a9c4efdef119cbe79a7","sha1":"ead1a6dd0e5eca7cbc08cf9f50ee933be40cedfb","sha256":"2db1e6ace47619531b34d212791e8e2a7ad2813d956139f67cd8f46285eec43b","sha512":"e0e3f3d1b20c9f629cbcf546a99d7dd5cd53c5f27eaf8c7208e00518e647a85a6bc089bd1d4e6d5603656e3452220b7075fa2efcee21026ff0384cf4d779d195","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOxMaCyOxMauOxMahJc+ueOxMaCNuOwhaCyOwhaa:ACFJRSUCj3RoSC5VRed","tlshash":"59b1a2a0092fa540eb431cc663cf3e3a9e9e6192601584f99bfd0858dc7ec2a7375b1c","first_seen":"2025-11-02T20:46:52.939803Z","last_seen":"2026-08-07T03:14:08.157255Z","times_seen":94,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":232,"dns":0,"connect":22,"send":0,"wait":32,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314680_13_20260125_101401_0012.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314680_13_20260125_101401_0012.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:18:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59296\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"93e57fb636936d4d17f243289817b6ec","sha1":"9f3ebc5652be945302e519af248fc67f5be5fd12","sha256":"ab853253e6b8a502bd7a0c5a65e7a204949e2b032da77605a426846969dc6e60","sha512":"0f152dde7220ec04f4011e1cac2517563caa2ffe4f626c03da5b6b66cffbc4080a2b2600c842ba012ce0acb6ae2035ceafd88cbbbe43178afaf314b7ca54bc0b","ssdeep":"1536:io34isP/V0w0xwOPNHCQ+wG/Fenblr8A9v:Ha3OwIcv2n1l9","tlshash":"8843c014c8a98273c98d7171bc853806a5b34f60c872bc28f69d33b2cfc2b91696b55b","first_seen":"2026-02-13T14:06:46.593386Z","last_seen":"2026-02-14T04:03:58.686389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://haltprizeatbaiust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 524853\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgiKm8mYkOlQe%2Bs%2FCIz1TltTrenVeH%2BFCqIOlE0dnOYwOmd0QekDKtF6qsD4228X5oINIkJ%2BtuXURYsUrVp3ypXLTStRpyjJbak%2FUqX0TXXD3A%3D%3D\"}]}\r\ncf-ray: 9cd9ad24d9ae35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-14T21:42:41.40355Z","times_seen":49177,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://haltprizeatbaiust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 21:05:30 GMT\r\nexpires: Sat, 13 Feb 2027 21:05:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 25084\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T20:26:24.499323Z","times_seen":20336,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":214,"dns":1,"connect":34,"send":0,"wait":28,"receive":10,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:03:32.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 04:03:32 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":18093,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c8ea8abed863d939a4f237023a3ab2ea","sha1":"ae4863177c8595e15a5bcadfe29eb09c74e8810e","sha256":"4a4902f45a945a941ecc3f0916d5316aad349771e6e1d0f8c6170f95faff1cec","sha512":"2ce791ea09ca99d42fe5d279b21e3faba84dbda46771c24ac2e9b1c7b4fc87a0a911ce5e96383eeaa3da1ed390958ae1bfc7134a12ed9d8d33b3c5d4c46316ce","ssdeep":"192:rCLhfHg7bJwhFXs8w4c8QTrCiwbv7f9BEIpMsSn7YRo6DMlD8DqieII5+565+:rCLCucWcFvCiwPrEpnrVD8DRzIAAI","tlshash":"a782317460c518b761f389baa7812fa4f9e8d647c607d685b6ec83c71fbdc60ca13224","first_seen":"2026-02-13T14:06:46.584055Z","last_seen":"2026-02-14T04:03:58.689046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":182,"dns":127,"connect":24,"send":0,"wait":102,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314661_2_20260125_101401_0001.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314661_2_20260125_101401_0001.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:17:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108407\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"a0db6417557bdeb9ecb66657a73f377b","sha1":"bb941635054bd25257ab83ca059307a77fd46acd","sha256":"5e5600839831e34cab2515e63dda173798c7035ea14edf74771e02626c42e9d7","sha512":"19162499f46be49235e842018905d32140225131940c14e91ba6f2489aca9fe2a164c455282a74e63fdfa6ba910a04f3ec447de596795abdc9a21e1f442a8ceb","ssdeep":"1536:r+9j6RIE+FJnkfXfetnqjW8xv0dVGxPye7vYEACTrrOLfCGRivTCJ2TjqF/uSLil:BIjJewnqjWwv0W8e7UOrroqzc2qxP8","tlshash":"30b3cedfcd22c361d5c4fb22a95570027a8917de41e66e29331e77d2db42bea05330ea","first_seen":"2026-02-13T14:06:46.594489Z","last_seen":"2026-02-14T04:03:58.690928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haltprizeatbaiust.com/uploads/sponsors/1769314729_14_20260125_101402_0013.png","fqdn":"haltprizeatbaiust.com","domain":"haltprizeatbaiust.com","tld":"com"},"ip":{"addr":"116.202.222.251","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haltprizeatbaiust.com/","date":"2026-02-14T04:03:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haltprizeatbaiust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:37:17 GMT","end":"Tue, 14 Apr 2026 15:37:16 GMT"},"fingerprint":{"sha1":"0A:D3:73:D7:8F:10:98:BB:BE:42:49:C4:FA:6C:2F:72:9B:23:F5:65","sha256":"63:1D:62:B9:A7:25:7A:FC:80:36:1A:09:26:79:BF:F1:14:D1:FB:12:7F:E0:D8:C4:09:A0:97:A9:E4:F7:1B:5E"}}},"request":{"raw":"GET /uploads/sponsors/1769314729_14_20260125_101402_0013.png HTTP/1.1\r\nHost: haltprizeatbaiust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haltprizeatbaiust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:03:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 04:18:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119642\r\ndate: Sat, 14 Feb 2026 04:03:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"044132e8fecf225b3f2e657dc1e8dbe3","sha1":"017828deee4bf09dd85ee03bc87df0ff6d988ee5","sha256":"2fed29c6db63f84126efcefd436d0393e7369f1bb7e1ff239c6e06fe7017e9cd","sha512":"d8f4651f9ba1e408c1bbd3e29772bd305c8a58ba38f8f33f2a6d309367a623b78d191d521f6d9c0f42e96524e5499e5c236205a086cd9c3b0d5bd1269f11593b","ssdeep":"3072:wXM6mqBZa3viFNj0YWMDR1gGGeAzmIpN+k8IRI/:h6fPQEjOMY5eIpN+k8V","tlshash":"1fc3e15e9c46e25f9bc131b20e8f3b52f0531a666ed32691b71ef13e1b091d21932e1e","first_seen":"2026-02-13T14:06:46.595564Z","last_seen":"2026-02-14T04:03:58.693106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"haltprizeatbaiust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}