{"report_id":"a61303f4-8321-4e87-834d-ed8d45165e20","version":6,"status":"done","tags":[],"date":"2025-08-03T11:50:44Z","url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"title":"PONKE - We're all PONKE"},"submit":{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-07T11:50:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-03T11:50:25Z","timestamp":1754221825,"ip_dst":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.22","port":50904,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-03T11:50:25.846564+0000\",\"flow_id\":1893837056333069,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":50904,\"dest_ip\":\"104.237.62.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":917,\"bytes_toclient\":3168,\"start\":\"2025-08-03T11:50:25.546061+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api64.ipify.org","ip":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2014-01-05","domain_rank":13197,"first_seen":"2020-08-17T05:58:17Z","last_seen":"2025-08-03T11:50:41.031493Z","alert_count":0,"request_count":1,"received_data":199,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"backend-new.trafficanalyticzblockchain.com","ip":{"addr":"104.21.91.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-30","domain_rank":0,"first_seen":"2025-07-21T00:14:40.469607Z","last_seen":"2025-08-03T11:50:41.046866Z","alert_count":0,"request_count":2,"received_data":2580,"sent_data":1426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"brave.com","ip":{"addr":"3.167.2.23","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1995-09-18","domain_rank":20413,"first_seen":"2022-01-26T21:02:31Z","last_seen":"2025-08-03T11:50:40.912995Z","alert_count":0,"request_count":1,"received_data":26168,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-30T15:14:12.092299Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"distribution-ponke.xyz","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-02","domain_rank":0,"first_seen":"2025-08-03T11:50:45.079459Z","last_seen":"2025-08-03T11:50:45.079459Z","alert_count":0,"request_count":7,"received_data":51298330,"sent_data":2910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-03T11:50:25Z","timestamp":1754221825,"ip_dst":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.22","port":50904,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-03T11:50:25.846564+0000\",\"flow_id\":1893837056333069,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":50904,\"dest_ip\":\"104.237.62.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":917,\"bytes_toclient\":3168,\"start\":\"2025-08-03T11:50:25.546061+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"distribution-ponke.xyz/settings.js","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59dc87af06e2e5aafa007f21aa9a02f6","sha1":"5641fa4ddba6678f1090c3593857d61d723d6240","sha256":"626058255fd86087d229145178d388e135464d89ab1dc6d71cd1af91cfce0c68","sha512":"df0cf530a63e39a4c1bffdb6297b0334c26f717a78ad43b90f01c7a672391d39fe9bb3c606025c23a0ec45853dc70f8187fc1efc21fa1db5cc00b03d517ec4d3","ssdeep":"","tlshash":"5ae0e7db371aa0c777150995dc3f43c899240a1b0880f5fdc021550040145fe66785ef","size":303,"data":"","first_seen":"2025-07-22T10:40:52.89267Z","last_seen":"2025-09-14T09:40:52.827028Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/main.js","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3269461c640524b544453aa9e81328e5","sha1":"44d2342051cf8e46d6f16ba281d8ed71c1fd493c","sha256":"8133614f5d3550d336c7232e717925a507b5de115c88ecba07f5f356f024da83","sha512":"b0f3c7d571d274b95200d1e22be405b54ece9d95d21e4294c24dcc788965506b6dad2985cfe26bfed73379fc8a4b52bee11431a6b93ee884f7810274303f7bb3","ssdeep":"24576:wwbaqWK+RDrGqtIV+n6zkjHAp7fXBzv6HUvUI:fbaqWKaDyV+n6zkjHAp7fXBzv6HUvUI","tlshash":"ce55f984b270b0a287ab29e4057b500ee235f91c344b40bcfa5cd8f67e79a89557bf35","size":1295285,"data":"","first_seen":"2025-07-21T00:14:44.48905Z","last_seen":"2025-09-14T09:40:52.829381Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-03T11:50:19.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:38:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItLrnY%2F2olPjPXujwLcawxnGUL2tehJjrPyQIiIP%2FjDobkA4DKoT85dXArDnIMxk1JR%2FxaO%2FBpH609NecExv5gWwsH%2FjFpcCJtbq9KVDE23ApHnv\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 969598c6bcf3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12237905,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41060)","md5":"edc289cad881972c955b82428d06219f","sha1":"528977d4fd6fcb09e937012ad5238d9c5c61e5b1","sha256":"2e3f52fbde4cde035375b31a3f6fadf3448b3e049cedd73e5dbb0c9e9a54287e","sha512":"b561f81101cbaa32fa09aa9d1d60062693316bb16af02b13ee6c4a0c40a8036778ae58920162ed00c1876d9e8de7284bd8a52190f926dfc068e0e43dd8194dc0","ssdeep":"24576:HS73FPoE/RTGVu2K6EDp/xvFL3uyuWAimTI:6ta8dFV","tlshash":"db25f0f3dd97ac852a61b4afb2573989bc2f658bbf2095e56540cc31508c5ee0ebcc24","first_seen":"2025-08-03T11:50:48.723737Z","last_seen":"2025-08-03T11:50:48.723737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":36,"dns":1,"connect":1,"send":0,"wait":277,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/main.js","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:21.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:37:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GerwvnDCidCYUnSWiXbM9zVVl3snbja8l25%2Bc1dIZktW5xm1xLO0PUP1A57%2F7yOcuBS%2F0nSrImoD5dAWDKbdegcs%2BRSAiaOy05R78uPqDUp4%2FIK2\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"688e4cf3-13c3b5\"\r\ncontent-encoding: br\r\ncf-ray: 969598cfba04569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1295285,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"607e92636fcf1373d0b260b9deed17a3","sha1":"3cd9314766f2ebf71140031f6aef60b2932b45a7","sha256":"68330b407182d9c5367748634dba25c961be65ac04931b5a2e255edb9e040aef","sha512":"b82a1d591a4076815c6c782a731214967ecd86a985435b0b57c61d4db76290c67d0eb8768b699f78802f9a76faaa4c70f6c0aed3b108926dd17ac556c6e3f2e8","ssdeep":"6144:ur+p/3wTSDi6b9zMrIW/aroiAs3GRJK4pISoEi+WO2wjyDLgj3CNvmsBoCk6YFKH:wt6byr1s3GpE+Rjfj3amsWQLqtI6M+w","tlshash":"ef25d884b370706287aa29e4097b504ff279f92c2407407cf66cd4f67eb9a89653af35","first_seen":"2025-08-01T10:28:20.124419Z","last_seen":"2025-09-14T09:40:52.827823Z","times_seen":12,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:23.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:23 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cfG8jfSPKyT22E9cYk1PiP1pIZ3DlCLZDfPnqGgCgpCq2yLEL3%2BdaqzV9csQAjzD00ZhfsZWjDyYNOcmgSY0pV%2Bq7VCdgR3z%2BSJzZILj%2BzU6fpPHhtX%2Fihr1Xn5mpsSC7IgKDIls0sSW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 02 Aug 2025 17:38:11 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 969598db4803712d-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1276\u0026min_rtt=0\u0026rtt_var=1614\u0026sent=240\u0026recv=353\u0026lost=0\u0026retrans=0\u0026sent_bytes=30461\u0026recv_bytes=19686\u0026delivery_rate=1987591\u0026ss_exit_cwnd=15148\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=a3ce73808918bc98\u0026ts=2372\u0026inflight_dur=62\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12237905,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41060)","md5":"edc289cad881972c955b82428d06219f","sha1":"528977d4fd6fcb09e937012ad5238d9c5c61e5b1","sha256":"2e3f52fbde4cde035375b31a3f6fadf3448b3e049cedd73e5dbb0c9e9a54287e","sha512":"b561f81101cbaa32fa09aa9d1d60062693316bb16af02b13ee6c4a0c40a8036778ae58920162ed00c1876d9e8de7284bd8a52190f926dfc068e0e43dd8194dc0","ssdeep":"24576:HS73FPoE/RTGVu2K6EDp/xvFL3uyuWAimTI:6ta8dFV","tlshash":"db25f0f3dd97ac852a61b4afb2573989bc2f658bbf2095e56540cc31508c5ee0ebcc24","first_seen":"2025-08-03T11:50:48.723737Z","last_seen":"2025-08-03T11:50:48.723737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":3981,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:25.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Mon, 09 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:74:6A:25:D6:31:FF:C3:36:8D:D7:54:7C:C2:B6:CC:A3:CD:17:03","sha256":"FD:FB:ED:F7:BB:34:34:80:84:89:30:C9:CD:7E:D5:3D:1C:26:7F:A1:2F:28:2A:ED:F5:7F:C8:CD:8D:7E:5E:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://distribution-ponke.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 03 Aug 2025 11:50:25 GMT\r\nContent-Type: text/plain\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":339,"dns":1,"connect":148,"send":0,"wait":148,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-new.trafficanalyticzblockchain.com/config?source=distribution-ponke.xyz","fqdn":"backend-new.trafficanalyticzblockchain.com","domain":"trafficanalyticzblockchain.com","tld":"com"},"ip":{"addr":"104.21.91.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:26.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficanalyticzblockchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 19:22:30 GMT","end":"Fri, 26 Sep 2025 20:21:13 GMT"},"fingerprint":{"sha1":"81:14:5B:F9:59:81:21:63:3F:3C:48:4C:BD:36:66:09:66:BF:3E:17","sha256":"AD:20:93:39:3C:86:67:E7:10:88:4A:82:69:BC:7C:E7:E0:82:87:FB:50:C5:FD:04:E2:34:6D:F9:3D:F4:4F:3C"}}},"request":{"raw":"GET /config?source=distribution-ponke.xyz HTTP/1.1\r\nHost: backend-new.trafficanalyticzblockchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Config-Id: 687e8fe869ba0fb1724c2018\r\nX-Client-Source: Perpetual-Client\r\nX-Fingerprint-Id: ce735799dc5739545d8e4d6966b01ae5\r\nX-Unique-Client-Id: 89ffa7b1c8d8577251ce39fbb0cd5dd296cccc2ce328f505df4ed00a02356ca2\r\nX-Data-Check: aafad86ce993ea07e3b8121b061524fe83c55c8c30787e98230872026e910fd2\r\nOrigin: https://distribution-ponke.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:26 GMT\r\ncontent-type: perpetual/encrypted\r\ncontent-length: 704\r\ncf-ray: 969598eebc2ab518-OSL\r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 48\r\nx-ratelimit-reset: 594\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ki4n7dkW8zbJhyNz2mmqOQdE741KRRF3A%2BZ0oMTkS49%2F0mM4z0pecCefk6dTjlAC3%2FiCqnzTMU7j6KT%2B20lKGzxSQQa80edZx4EhlS%2Fcdcx6MJ%2FC%2BFjCA6ALpkep6wEsu43Is%2BNjZlVSF1TadSShKciozh2H9f8qbkM9H7g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5192\u0026min_rtt=455\u0026rtt_var=9433\u0026sent=9\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=3959\u0026recv_bytes=1563\u0026delivery_rate=6745341\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=8c6f7520d531970d\u0026ts=281\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"perpetual/encrypted","magic":"ASCII text, with very long lines (704), with no line terminators","md5":"2ddb762944b021174afc370ba63c27cd","sha1":"c6f3c1b1db90d6626e799a93204a28097d9941db","sha256":"378d1996b901b89f10b1d1321b3abc20a81f420b60f11c4913355872f3c7aa68","sha512":"ddea04f8d7e01308e47842f1dd5cf369dfebc01180622467e6321759ac938cefe80660bd4d99857eb70ea03ef467b15db515f88ad4e3f84be623e85fe337126a","ssdeep":"","tlshash":"5e0199654224d6d15c363334d4c7d9e73de804320581e9d95056c1410d893f3db1b8c6","first_seen":"2025-08-03T11:50:48.731428Z","last_seen":"2025-08-03T11:50:48.731428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/settings.js","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:21.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET /settings.js HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:37:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltj3857UQxAnIGKivuiyVKON5zt8OMwI3d%2BIuvN0Xs7QDwLWl05EuHbqn%2Fs%2BWDoK8b6%2BWhaOF1ZgRi489wnhY62xX%2FctpT2mH0ypjdG23EDw0YVV\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"688e4cf4-12f\"\r\ncontent-encoding: br\r\ncf-ray: 969598cfba01569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"59dc87af06e2e5aafa007f21aa9a02f6","sha1":"5641fa4ddba6678f1090c3593857d61d723d6240","sha256":"626058255fd86087d229145178d388e135464d89ab1dc6d71cd1af91cfce0c68","sha512":"df0cf530a63e39a4c1bffdb6297b0334c26f717a78ad43b90f01c7a672391d39fe9bb3c606025c23a0ec45853dc70f8187fc1efc21fa1db5cc00b03d517ec4d3","ssdeep":"","tlshash":"5ae0e7db371aa0c777150995dc3f43c899240a1b0880f5fdc021550040145fe66785ef","first_seen":"2025-07-22T10:40:52.89267Z","last_seen":"2025-09-14T09:40:52.827028Z","times_seen":13,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:23.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:23 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dmfW85I5GqotJEgZcpuQFXhPqyY7AOWdifq32h7d7mtH4E3IYpS6qj1HLtzEzq2C%2B%2Foo363KzH7PR%2Bt6okxhxlbkeqE%2B1QIzTYCFJU46pdyVcNy9PLLfQJ1a7FAbL4jqM0XN7UIP2E8m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 02 Aug 2025 17:38:11 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 969598db2800712d-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1905\u0026min_rtt=554\u0026rtt_var=1585\u0026sent=230\u0026recv=350\u0026lost=0\u0026retrans=0\u0026sent_bytes=17202\u0026recv_bytes=19554\u0026delivery_rate=489056\u0026ss_exit_cwnd=15148\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=a3ce73808918bc98\u0026ts=2359\u0026inflight_dur=57\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12237905,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41060)","md5":"edc289cad881972c955b82428d06219f","sha1":"528977d4fd6fcb09e937012ad5238d9c5c61e5b1","sha256":"2e3f52fbde4cde035375b31a3f6fadf3448b3e049cedd73e5dbb0c9e9a54287e","sha512":"b561f81101cbaa32fa09aa9d1d60062693316bb16af02b13ee6c4a0c40a8036778ae58920162ed00c1876d9e8de7284bd8a52190f926dfc068e0e43dd8194dc0","ssdeep":"24576:HS73FPoE/RTGVu2K6EDp/xvFL3uyuWAimTI:6ta8dFV","tlshash":"db25f0f3dd97ac852a61b4afb2573989bc2f658bbf2095e56540cc31508c5ee0ebcc24","first_seen":"2025-08-03T11:50:48.723737Z","last_seen":"2025-08-03T11:50:48.723737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":3489,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:23.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:23 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S0OGmgeJTg01Lo3IXJfxZ3Z1ElPSY2xs%2BCsA2nZmRMUzPWnYlIriqkj6BhwJKh7n6LjIol%2BakQMDhENeMh7Ywv7YgvRHDioyVatgfrxnKp9jjL7gCL%2B1lpa6WWah%2F5BXWfsxCCIJ5l4r\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 02 Aug 2025 17:38:11 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 969598db3801712d-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=640\u0026min_rtt=0\u0026rtt_var=531\u0026sent=260\u0026recv=362\u0026lost=0\u0026retrans=0\u0026sent_bytes=56955\u0026recv_bytes=20090\u0026delivery_rate=3235565\u0026ss_exit_cwnd=15148\u0026ss_exit_reason=2\u0026cwnd=17843\u0026unsent_bytes=0\u0026cid=a3ce73808918bc98\u0026ts=2392\u0026inflight_dur=72\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1045653,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41060)","md5":"6af006edc087a2e78e9b3c09f47e788f","sha1":"aff884da683c7a936e3ff2e61a4c04b7c7010d4d","sha256":"689006fa146dde82e64a05123b74a91d06a93e61d4a8302b2080aa15de67072f","sha512":"926a39ce1616914ea671a9cc6f48c5c01a75d18c8ebfb851ea6c289eaefbc2b5cf46f2993540d30130bb5d62dbdb675b96acb3fd65f5fde905f01fa5818618e8","ssdeep":"24576:HS73FPoE/RTGVu2K6EDp/xvFL3uyuWAimTI:6ta8dFB","tlshash":"7825f0f3dd97ac852a61b4afb2573988bc2f658bbf2095e56540cc31518c5ee0ebcc24","first_seen":"2025-08-03T11:50:48.735581Z","last_seen":"2025-08-03T11:50:48.735581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":361,"receive":1071,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-ponke.xyz/","fqdn":"distribution-ponke.xyz","domain":"distribution-ponke.xyz","tld":"xyz"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:23.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-ponke.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 02 Aug 2025 17:23:01 GMT","end":"Fri, 31 Oct 2025 17:03:44 GMT"},"fingerprint":{"sha1":"3A:BB:9A:1F:BA:0C:F3:54:15:20:28:7D:59:7E:FC:6C:6A:25:C7:95","sha256":"61:2D:57:18:43:3C:3C:47:7E:91:00:EE:F5:07:8B:BA:1E:0F:67:43:1D:3C:A5:CF:BD:30:C4:BC:DE:28:39:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: distribution-ponke.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Aug 2025 11:50:23 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BcDY8b0dUVyCYSsPTtdY0KLP4ngIbabVUOPT16iRcl2gbaMlyBEu9yx53OxLQOf%2B2kLrDEHaMZL9vlWHF%2BdQJsxhoiXDwhh%2BAE5UfdDBaK7AdBhLqE65cNawU%2FnOFkoC49JsL3AbDbYv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 02 Aug 2025 17:38:11 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 969598db4804712d-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=791\u0026min_rtt=0\u0026rtt_var=730\u0026sent=250\u0026recv=359\u0026lost=0\u0026retrans=0\u0026sent_bytes=43679\u0026recv_bytes=19952\u0026delivery_rate=3235565\u0026ss_exit_cwnd=15148\u0026ss_exit_reason=2\u0026cwnd=17843\u0026unsent_bytes=0\u0026cid=a3ce73808918bc98\u0026ts=2385\u0026inflight_dur=68\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12237905,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41060)","md5":"edc289cad881972c955b82428d06219f","sha1":"528977d4fd6fcb09e937012ad5238d9c5c61e5b1","sha256":"2e3f52fbde4cde035375b31a3f6fadf3448b3e049cedd73e5dbb0c9e9a54287e","sha512":"b561f81101cbaa32fa09aa9d1d60062693316bb16af02b13ee6c4a0c40a8036778ae58920162ed00c1876d9e8de7284bd8a52190f926dfc068e0e43dd8194dc0","ssdeep":"24576:HS73FPoE/RTGVu2K6EDp/xvFL3uyuWAimTI:6ta8dFV","tlshash":"db25f0f3dd97ac852a61b4afb2573989bc2f658bbf2095e56540cc31508c5ee0ebcc24","first_seen":"2025-08-03T11:50:48.723737Z","last_seen":"2025-08-03T11:50:48.723737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":5364,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-new.trafficanalyticzblockchain.com/config?source=distribution-ponke.xyz","fqdn":"backend-new.trafficanalyticzblockchain.com","domain":"trafficanalyticzblockchain.com","tld":"com"},"ip":{"addr":"104.21.91.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:26.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficanalyticzblockchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 19:22:30 GMT","end":"Fri, 26 Sep 2025 20:21:13 GMT"},"fingerprint":{"sha1":"81:14:5B:F9:59:81:21:63:3F:3C:48:4C:BD:36:66:09:66:BF:3E:17","sha256":"AD:20:93:39:3C:86:67:E7:10:88:4A:82:69:BC:7C:E7:E0:82:87:FB:50:C5:FD:04:E2:34:6D:F9:3D:F4:4F:3C"}}},"request":{"raw":"OPTIONS /config?source=distribution-ponke.xyz HTTP/1.1\r\nHost: backend-new.trafficanalyticzblockchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id,x-data-check,x-fingerprint-id,x-unique-client-id\r\nOrigin: https://distribution-ponke.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 03 Aug 2025 11:50:26 GMT\r\ncf-ray: 969598ed9a09b518-OSL\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q8v%2FwlQnOA1cMgbRWkfYwtQzjTxXM7s5svA3ABE3wx7%2FBc9EsmiTTc2GzodulKEqY6Fc6AwnCqCVfI%2FlW%2BgJKubvQJhmuHtHt4Im%2F2nT73L9ivZjzDSk19enujxx34d%2F2uvqTYK4%2Bfrr9dPDZtKdcJR2bRl0M2JVPhfkxTY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5869\u0026min_rtt=460\u0026rtt_var=10773\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3253\u0026recv_bytes=1233\u0026delivery_rate=6745341\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=8c6f7520d531970d\u0026ts=215\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T19:32:44.84941Z","times_seen":17639590,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":36,"dns":1,"connect":2,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave.com/static-assets/images/brave-logo-no-shadow.png","fqdn":"brave.com","domain":"brave.com","tld":"com"},"ip":{"addr":"3.167.2.23","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:26.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Oct 2024 00:00:00 GMT","end":"Tue, 18 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E2:11:98:BA:BF:63:2D:F1:BE:B3:44:AC:C4:C6:BD:4D:40:5C:27:A9","sha256":"97:66:3D:19:0C:76:2C:40:AD:10:ED:EB:9D:E8:66:E6:59:CC:31:A6:9C:56:01:66:EF:D9:59:0D:2C:95:10:01"}}},"request":{"raw":"GET /static-assets/images/brave-logo-no-shadow.png HTTP/1.1\r\nHost: brave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 24379\r\ndate: Sun, 03 Aug 2025 11:50:21 GMT\r\nlast-modified: Tue, 23 Aug 2022 22:33:08 GMT\r\netag: \"5420c2011e428f4929f7330ce63e31cc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XMpJ4Jj0eZcKiv4HcrSGETB5ebbtRSXt\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-security-policy: connect-src 'self' https://search.brave.com https://newsletter.brave.app https://analytics.brave.com; default-src 'none'; media-src 'self'; font-src 'self'; frame-ancestors 'self' https://ads.brave.com https://ads.bravesoftware.com; frame-src 'self' https://blocksurvey.io https://survey.brave.app https://contact.ads.brave.com https://html5-player.libsyn.com https://player.vimeo.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://www.youtube-nocookie.com https://app.boostr.com/; img-src 'self' data: https://imgs.search.brave.com https://analytics.brave.com https://boards.greenhouse.io https://job-boards.greenhouse.io; script-src 'self' https://boards.greenhouse.io https://job-boards.greenhouse.io; style-src 'self' 'unsafe-inline'; object-src 'self'; manifest-src 'self'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nonion-location: https://brave4u7jddbv7cyviptqjc7jusxh72uik7zt6adtckl5f4nwy2v72qd.onion/static-assets/images/brave-logo-no-shadow.png\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UtH0SV8APsKh3ZupjPN2zXNgfuefFaeSaS6Ea6GyqB16K34FCY50Dg==\r\nage: 6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":24379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 155 x 180, 8-bit/color RGBA, non-interlaced","md5":"5420c2011e428f4929f7330ce63e31cc","sha1":"067cd10ed2f7f86181706b436a556bd6dfa85e83","sha256":"1661ae7a593738204313455516135a883d0b41f90764cf032dd007b529bb0c03","sha512":"a792bd35ba76b9de8d89303732f7c2d1f14c84a13e68447660ba59f18e7112fc02071ddadf520db4bd0d807305867b518e1ccafb7e216bcecb5bb6840be7dd7b","ssdeep":"384:4EVi+Yks83vAmTV8AP8VGzohPjRMFl+uPGEcL4VMe9uaaijn2EDvlTh5E/:4Evc83vzTGBVGzgPjy+uOesal1Dv5E/","tlshash":"00b2e1572dbb856a58d10213bf8ee1f601224ef5b2bd00ab0d2efd92d5c24f5c50978d","first_seen":"2023-05-16T23:24:24Z","last_seen":"2026-05-03T10:03:53.509858Z","times_seen":476,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":25,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-ponke.xyz/","date":"2025-08-03T11:50:26.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 Aug 2025 11:50:26 GMT\r\ndate: Sun, 03 Aug 2025 11:50:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"85d9dfdfbf64e02eda145e9820014189","sha1":"ac10deb6cb098e80a7389c969cef0fd54ca8d4f3","sha256":"2bd655e6b4de3d2f245c30385d8fd239e6c062de5d4eda60660646b027c75996","sha512":"a4c6b6c898e40dde7be1979ace1189ba93a36637f350f4d435d8a305fd17444ff0a0bd10953f7ca84f71fa51eaad2356ea13bbde948bb4563973bbb77324c2bf","ssdeep":"192:9xNktq346lDYxOLuq3/pl8xxruLq3iwllV:/bGo4VJ","tlshash":"83f18b92402ba400ab971cc233cf7f3aaece50856485d1b96ff90cd59ceeda6436871d","first_seen":"2025-05-29T20:09:15.101694Z","last_seen":"2025-09-10T15:51:30.901138Z","times_seen":410,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":104,"dns":3,"connect":27,"send":0,"wait":48,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}