{"report_id":"a9de4daf-6021-451c-b70b-623be09e7bb9","version":6,"status":"done","tags":[],"date":"2025-10-15T04:38:23Z","url":{"schema":"http","addr":"joinofz.net","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":0,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"joinofz.net/","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"title":"OFZ LINKS"},"submit":{"url":{"schema":"http","addr":"joinofz.net","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":0,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-19T04:38:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ingress.linktr.ee","ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2016-03-08","domain_rank":158740,"first_seen":"2021-04-21T05:10:58Z","last_seen":"2025-10-10T02:47:20.007477Z","alert_count":0,"request_count":2,"received_data":2342,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2025-10-12T22:36:32.448589Z","alert_count":0,"request_count":4,"received_data":5754,"sent_data":1956,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.production.linktr.ee","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-03-08","domain_rank":151189,"first_seen":"2022-12-04T17:39:38Z","last_seen":"2025-10-13T13:03:38.643688Z","alert_count":0,"request_count":2,"received_data":19318,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2025-10-12T22:35:58.05135Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.joinofz.net","ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-15T04:38:26.192154Z","last_seen":"2025-10-15T04:38:26.192154Z","alert_count":63,"request_count":32,"received_data":3481148,"sent_data":15178,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":8,"received_data":340328,"sent_data":4332,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-au.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":109663,"first_seen":"2020-07-22T07:26:03Z","last_seen":"2025-10-13T13:03:38.364566Z","alert_count":0,"request_count":12,"received_data":859550,"sent_data":5668,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"joinofz.net","ip":{"addr":"37.16.16.138","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-15T04:38:26.193685Z","last_seen":"2025-10-15T04:38:26.193685Z","alert_count":4,"request_count":2,"received_data":119754,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.joinofz.net/consent-scripts/one-trust.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b92d40afa08c222489f6f150e1464a1e","sha1":"2ef9fbf197c9ad911d4334ed36ae903a0638b689","sha256":"54b72c1856fb8fe018e5715edf14a8af098a8ef6730fed6616610ebf4745e18d","sha512":"fbee3bb1515ecc9026e56d89abc05d2f5add0eee247934e0bda47085b3ca5323f7ff6fd301630df30bf56a07cf400ad5edbc0e9212e6e94817c5ba955ff174e8","ssdeep":"","tlshash":"2671868cfa1da57002e112e5657fa20df23260687113e0d0a15ee8e2741cdcb6477efa","size":3580,"data":"","first_seen":"2024-08-24T15:52:00Z","last_seen":"2025-11-14T10:25:33.256406Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/e8e2b346edcb140fa45544d015e4b781a17c80b9/_ssgManifest.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-04-04T11:33:23.740641Z","times_seen":203141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/webpack-d53565ea72be22ff.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"400ecdd68e5c419d917f3dab04b54eb3","sha1":"59c06138b2fd6422a5f3c865192ceabf91acac69","sha256":"1de9afeff8661e74ecd53c0cf516b4c6d4a2dde87ba371f83dc12e12436c26fe","sha512":"b5bf194ff1df2f882ff48e8e74e4242cb682dbb72cb00a6baaa26927da775ca90ab2c1217700a00e4339b6c83e9c79703b6066d919b6a82cba2f5d81c1c8b525","ssdeep":"768:uSM9ZaY2IsmewokKqGZ1J86Mo/+7BRSkjKzYmcwO7XxIbT+kobG7Y9:cZHoqgXMN7BRSkmzYmPO73D6o","tlshash":"38f2c9eda34a58573fe038f1ebe2f96ae54a54419c835cc1e0894ebc49b2574c3237b1","size":34462,"data":"","first_seen":"2025-10-15T04:38:35.931831Z","last_seen":"2025-10-15T04:38:35.931831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/framework-0b885bda87b2d766.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5cf3a75dd57b375516af88b6eb7892e","sha1":"bc2782757f6deae54ede3bad24ba13ab4c472469","sha256":"c60c4f2d5d5967c4382d61c41f1c7d0640d6cdec2f88b907b41e01feda6cf26b","sha512":"0b208fb1ec9fa683c534131285dd48b13666229c5a9977e538a32c271aed2ed077cbc9c79b1a9812208c016d6d1453c368350f2be38f907754466d1f0ce70e98","ssdeep":"1536:IPB+L1vxEPnsrUU69jVdUuHA/YuFER3DJzWiPsizutKbi/MREcyUmQjiUqpyZK:I5K12PnHp6iA/7FI5Wikizu8mQjiUqYc","tlshash":"18e319ec7986f1e299f352a610af1407737c561ba40c4cb0a150eee935fc45aa27bf8d","size":149648,"data":"","first_seen":"2025-10-07T04:31:31.328452Z","last_seen":"2025-11-09T08:41:51.675437Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/profiles-Form-Input.5f84a4dc5f1371b6.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a64435b88f290a6a639c683135578a","sha1":"bf735b732a3afc8152bfd341d8fe120c71bcb87b","sha256":"87683a994bf62a64112a6dd3dec02877eb24c538e6f1b0c47d1781dd89b01c5b","sha512":"3cfb16e6428577d2cf51dc1cf4834eb9429d7d8f71b9de47537db12d3f677d794dd40ec34b7baf82bb3871a9391e1fddecc470340ae8d2a6b0b58e477855756a","ssdeep":"","tlshash":"7241c548f991ffdac0a345e061aee007f10a2701ce37a466f7e4a84086442eb7b56f87","size":2338,"data":"","first_seen":"2025-08-21T09:58:43.104441Z","last_seen":"2025-11-09T08:41:51.680015Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/pages/_app-214ff224696f680b.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07d0236ea405a1928c9e491a71c6e234","sha1":"4fd0ab5f1945cee6b853dd054e17ab89bef2b75d","sha256":"1b26363634e8e98c868ea89f1270cbeecb06435e56a43951e3de8c98b91b41bc","sha512":"c39641d3909dfb975c4248c2ebd4ead412b1fbaf624ae858c15d225f3c738efc018e479381b2e330b590d0b284c3aeb782f54c8abddfa3195d6333ac2c7d6871","ssdeep":"24576:aMIVJwhwD+3siENBAnKkK6lRVn9xMBoi1Wb:a2wD+3siENBAnKkK6BPMBosu","tlshash":"29d56ce5b302f98443f788e150bf550ab12e2924607880e4f769cdd55ee486f23b6f7a","size":2834489,"data":"","first_seen":"2025-10-15T04:38:36.046039Z","last_seen":"2025-10-15T04:38:36.046039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/otSDKStub.js","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f266bedfac21857dedcec1f66506eb67","sha1":"9b0f6bb138b3b96c6c285aa22f0292c262d057a0","sha256":"d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768","sha512":"92818623cef9d937577921b4a1ad7b353b12962086e8705ebe87fb5f085189826a9cda7e9c9efcbc01ebd69e8ca30281190ecfa78b5d96892d74265f2a11a2c2","ssdeep":"384:8Tg8XNbpLx6jhA5SNYbGr1Uci0FPvfC5mC1X2cqKpQinGHKJxEV88y:agKFLxUhA5SNGsUci0tDCZqgyy","tlshash":"cfc2f8ddb140fe3446d3a19c5a3be25a723b746d34869064b8a4ece0247cc4f6533bb6","size":25886,"data":"","first_seen":"2025-10-06T04:17:24.407426Z","last_seen":"2026-04-01T06:47:16.882391Z","times_seen":11500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/follow-ToastMessage.c1979f7bf98b8749.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d085a1e49c7095a37aefc1fc94f1395","sha1":"7ab5d0382a8992edd4af9c3558c93c17214942a1","sha256":"d1b8c03c0225d8070940cec1eeb470178e6105e6a6dadb97b04a1172d42e0dde","sha512":"f6882abb7005bca3243ee93503ce373fff7c4243331966831c1d7be14704afdbd1c4297bf88dcc7e5dbcc4babec92ff8dcf902c8646fec91dc9aba2cfb506f0d","ssdeep":"","tlshash":"5d51b7a5f590effc486b01d4547ad04ef02d25a49829a5d8f3a7ec600a440b5bdd6b93","size":3144,"data":"","first_seen":"2025-09-06T01:35:07.120855Z","last_seen":"2025-10-20T19:34:24.909859Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"joinofz.net/","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4227b1f95514aba9678f435b57f5609a","sha1":"fec7d2b5610893a309583b8bca229c1f99c50b4f","sha256":"2098af8ad44a87e539aeb526106178d800231e1cd9b149944dd9994bd3768844","sha512":"49d63a54cdc04b9d6ad99013f5955a22668877027cd84b6038a7a477a2944757e5f7e2a5d3e31232952264c1a27a507caf0fc3a458dbe0062735e9bfdb6832f4","ssdeep":"192:lSrJTlnbH7946a9EzUJrtT+GJfiJwgl9opdpCEfIKk1B4scQCjNsl+vmd0n3iIEl:lWlnb7LcTFJfiJLlKBsKQ+scQCjTvPOl","tlshash":"6232b46639b3002b123742ad3beb7348f63041077b51df55b98c06d6afd8a6065b2bde","size":10918,"data":"","first_seen":"2025-10-15T04:38:36.088468Z","last_seen":"2025-10-15T04:38:36.088468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"joinofz.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T11:45:55.568744Z","times_seen":94443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/pages/%5Bprofile%5D-dd53b203d0569cf6.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca29c03b496626b442d74f89e4bb38c6","sha1":"340415475758bded3397be97400b53a63fcea2f1","sha256":"87184284a1fa7233a93a7766055c154d6f40808bf6ada6308d8bc629491ce280","sha512":"a86a21bdd648266c8e0a2fefb52f7c8c059dede2fba23abe41d91f7bd2f2f31f99df74f5d9548856c46e02cabc6d6cd11905880f85a929bd868ab2444e455fa0","ssdeep":"96:wzezbafdky/32RKx/ymOx/yomyX+Ds0HVfm5by8nd3xKIS4dUZg60A6ZLcQAd6:ohfdkyPkQ/yH/yovXVMVO+t+6us6","tlshash":"e5d1c9ead9a8fd321ad79977746b530ef424265d205e9014f7aa4c7c281528633f2f0f","size":6303,"data":"","first_seen":"2025-10-08T05:41:18.224573Z","last_seen":"2025-10-15T16:29:09.645393Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/e8e2b346edcb140fa45544d015e4b781a17c80b9/_buildManifest.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0822da5d2334fd267f8bff4a187f9cf1","sha1":"fb6985ac41d192e19d862f40bc3c9028cd3e36f8","sha256":"8a9fafd4d518e0d384ed9559ff9420a25b8f79ef3d8d2bc9053307494d082daf","sha512":"3a0a09785150996cbe55d51cf0cf73c4734c5cae115c5224a9bc890e0ccc7e09f0c1cf9c3ba61ccbf289844f87bea380cf5ba85d20b5ed73eabc086385a03745","ssdeep":"","tlshash":"4a21a643940cdd03ae38fc96305b23229d91ce727abd0a85825cc75c22af3594fd4933","size":1117,"data":"","first_seen":"2025-10-08T05:41:18.228806Z","last_seen":"2025-10-15T04:38:35.819244Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"joinofz.net/","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7469f3319dac716fd334a85ad075b73f","sha1":"e84050dcf455c5f510b4811a534a7e8bc2dc73a9","sha256":"230a1fceca41ffb79f22fbaefb1fb2229e00c060ce952d1352f6d6b8b4cdd5c6","sha512":"7cf83f2aa746b609c7f8d8c0cd828e03d787929bb877870e44d39ce2d72fb9a932371aa693ec0571f1c6c7ef7bb6cce7eab3f1c28b5da853ec4e95a1521fb335","ssdeep":"","tlshash":"83c02b406c9464bc90900051f333af14132c0314430412002581c98d3c1b003b32369c","size":137,"data":"","first_seen":"2023-03-07T12:03:21Z","last_seen":"2026-04-04T06:48:36.089671Z","times_seen":480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/1570-f0940cc5d44b0452.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b9231a5a38b561ce60906b9d3028b0d","sha1":"6251067c2307d3351722f731627118f4c50cd0f6","sha256":"fa53cd3ae4cf60ea86b4dbe4f19a51042c54274cbb95b4eb6c782b4b01e5bdaa","sha512":"30b6745c11482dbd1a17e1397b74daea7355e444d636eb5a2f3632e4871520f99c5e892f43da10ea78b5b279725ca629c5ac23486ceb9812d455a30f7a650db5","ssdeep":"768:xngsFQKHESDmikGBNCn3COquGVfCFZ2YlMU2:xNZkObOq9c2","tlshash":"df23f98c71d7b1524fd360a4142f230ab37aa9515488d808f972eed1eda5e4da3b7f34","size":46541,"data":"","first_seen":"2025-10-07T04:31:31.386685Z","last_seen":"2025-10-15T04:38:35.715559Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/cep/cep.min.js?v2","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7260008feb9b6d2690740d0ab68dadcf","sha1":"d919ea7922ae455492b9cd17418d35bbeaaad9f4","sha256":"d0c2458c953a0cee3638d5cc1faea830837eca2790ca28509ce2dc443338ace2","sha512":"9ea23bedb37ffdcb62c91ad17e3460113d7847cda54795b3f7ee6f481c93786ec87786c0546d56a2971c59d88873279c05012313d48f25224b81ccb646fda306","ssdeep":"192:4srSxY+HdCxo6iNwAV8AxtqlyvdT6sKuH1WWwHokoEvMhxoe:VrShHdCjm9VzYlU6sKuH1WWuoevMhxoe","tlshash":"2312d845f145b5b20692b0a4223f9305b37f1a4531da8529a27ad8d13e28c1f953bfff","size":9766,"data":"","first_seen":"2025-09-17T18:56:53.492157Z","last_seen":"2025-11-04T10:54:45.987735Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/6015-18117c08e6054765.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d08f5187dd9d3c6d180efc86e9e2c2b0","sha1":"91ff93aeca5c5e94d6caaab74c217887aabce373","sha256":"6da615c7b3f8c47b5aa78a793301b090f960588bf60c677524863ad3a3c67239","sha512":"72b6352968ef5d78bdf77d350d3d71957a44694f6987093cab88616cf43ab71e06aa80c72128d0adf2c5bad1cab126b041c6d40e8d19953649590d3ff5244cc6","ssdeep":"768:0SbO5YOnXjIfnLR+giMhM/M9hKYnlQQcWXzIguIBCilf6zX5sVLzWIXjX6oEUabC:9JOnoSETBlQQcWMxFilf6zX5sVLzWejD","tlshash":"58235baaa614de1d1e828b2974ca7f46f1e13d7082408462d86acfbd13f5454ba33ff5","size":48212,"data":"","first_seen":"2025-10-07T04:31:31.224407Z","last_seen":"2025-10-15T16:29:09.678698Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/main-43194564d3e1c2dc.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8437363cae592bcfb47aa2ba86b81b07","sha1":"e677a449320a1715817cf8a7c675a9e404942423","sha256":"b50d58cc9466efc03c6c45af0b3ddc392d1be038ba5c1ec2fe71d452f4430fe3","sha512":"d95af8432b344a1030cb835d31a40bbf42f0a231229297e2ff19cf5600b4619f41ff2a2001a12b35225869fa6365663b3cbfedcc2d91c841af08cd2206aed7b4","ssdeep":"1536:DHty14tYfCeLL3c7OSCU1xzJDicVrPBS1Bw78NyQzGzUwHP+SyRwWkoesVKHSoDX:bVeC/VaBw780UwWTSHSmlv6yNN5","tlshash":"e7d319b8b2e2f89206c601d8443f0046f27e1d6a106eb485f399edd779a4d4e90f2f6d","size":132656,"data":"","first_seen":"2025-08-21T09:58:43.127221Z","last_seen":"2025-11-09T08:41:51.625388Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/202505.1.0/otBannerSdk.js","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18762e5462bba8569d5eea27a8706e5d","sha1":"7251ae3c847a1b71886d2b1b460a9c0247110b07","sha256":"ea84193c3562ce2927329b92fcc12c77ee02e441dcc5f616132f48bf5fbc1bc8","sha512":"1b364a9f857d9851790b93d3370c124ac7ba252cd541f6055505755c6eb8f4bc1f1c62f63cb01737bb509247ec14632415bcc254e626e4b47e3129dba88516a7","ssdeep":"6144:ffKthRZtx7maE7qaDtQK/CsMebppuVW19WNpfp8k2LpFAYPmC:fOx7maE7qa0k9E2fB","tlshash":"4eb4298e7590753587e752b8c027414aba3574acac85806cb44cc5f90bf9f821ea7fbb","size":504085,"data":"","first_seen":"2025-05-25T04:56:23.349576Z","last_seen":"2026-04-04T06:54:01.20174Z","times_seen":3291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.joinofz.net/consent-scripts/one-trust.css","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://joinofz.net/","date":"2025-10-15T04:37:59.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /consent-scripts/one-trust.css HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-ray: 98ec9fda8a5d3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 333799\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\netag: \"408b08dd590db636487c0c7fe3e9193a\"\r\nlast-modified: Sat, 14 Dec 2024 19:42:42 GMT\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-meta-surrogate-key: consent-scripts\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4214, 191\r\nx-served-by: cache-bfi-krnt7300095-BFI, cache-bma-essb1270029-BMA\r\nx-timer: S1760169280.413394,VS0,VE0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CilkZrqvzNW73MKAkGjneRhiCMoclHBXfUN66q%2FiZXH4aqLtE9evVJ5pZOB7Tu%2BYZGqTUT7gNvLVm0ftk7QCn8RTTS9F4Vu0d9sqgTFlLF2CNldSjNEuuzltt8H0xfFDiLY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5555\u0026min_rtt=434\u0026rtt_var=10214\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3269\u0026recv_bytes=1215\u0026delivery_rate=7715808\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=2ee16fc777c2e516\u0026ts=227\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5618)","md5":"408b08dd590db636487c0c7fe3e9193a","sha1":"a063625e8f20ac0bfd7ce9d009cc513a8711ac7b","sha256":"d41f1fe476944963983549cdc3ee6d8429498d65edb3245f7c11ebe844518fc5","sha512":"822bcb81aac33530fda5a39fa8b4e56a47fc7648692bcb7ef639d95bed55efc2495ef66dc3115ca12ff0f81fa241a903efdb314206cfa5799b2d567815e9ef40","ssdeep":"192:E+gx2WNMxAjqaKaJjyRB9qE05Zde4scbrEKTdGsibN9NIB/4:sKaJmJc4","tlshash":"02223397b5c06329e6e7cb6981637abd35292d4ffe339edca10563b012897e31cd1608","first_seen":"2024-11-11T17:13:00.874451Z","last_seen":"2025-11-14T10:25:33.281567Z","times_seen":305,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":177,"dns":152,"connect":3,"send":0,"wait":206,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/brand-telegram.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/brand-telegram.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 310\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 98ec9fe2983b569a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"37d50bdfcb61aafcc21e56c169f4f342\"\r\nlast-modified: Sun, 02 Mar 2025 23:23:43 GMT\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65406, 1\r\nx-served-by: cache-bfi-kbfi7400047-BFI, cache-bma-essb1270034-BMA\r\nx-timer: S1760169281.256970,VS0,VE1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZgOEduihMPK2SH1m9DaesFRoeEiBbUH1LjwmyT6TcJC%2BY%2ByHpqTHA0jhlXXXtHcc9QE8n9hsU8IMoM5hPP17FmpBGJyLyQiu3f02Ver2ojLh1M%2F3zbN0PvPP%2Fzy%2B2RtQXzU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3678\u0026min_rtt=514\u0026rtt_var=4110\u0026sent=29\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=9237\u0026recv_bytes=3573\u0026delivery_rate=950624\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=20657\u0026unsent_bytes=0\u0026cid=4494fcd57bf1e7d0\u0026ts=1121\u0026inflight_dur=57\u0026x=54\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"37d50bdfcb61aafcc21e56c169f4f342","sha1":"361082626efc75639f3ed05f035807c0d0c7d935","sha256":"4a1023bb65efb2a268a3e4740225c369fbdaae87fba3d48c87ea2dd526c4cfbe","sha512":"e2ba855c27dd30935e8f662cf76696527a485a542bc28be8ebe536f815944cef0d932649ef74dc41a4a48e00b2f916858efb93a338359491b33823fd5b1240ec","ssdeep":"","tlshash":"88f0a39ade0c0f2d5a2f811579987554236c7357934f150695ff43301e1e44ce165788","first_seen":"2025-10-15T04:38:35.648075Z","last_seen":"2026-02-13T02:26:47.847737Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36860\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:45:34 GMT\r\nexpires: Fri, 09 Oct 2026 11:45:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 12 Jul 2023 22:07:37 GMT\r\ncontent-type: font/woff2\r\nage: 492747\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36860, version 1.0","md5":"65aa2c0484ef8245fe5725ce982ff8cc","sha1":"ab4128365bfaecfb5be23f5ef7294354a8a96aea","sha256":"cfbbd0037dbc07a549504172d6c1e6f0f95cb2b57da8b934028b218b35af95b9","sha512":"536213bc23dbfec0bdcc088a8e4c7719763c2a468af2dc422bad1123131599613f996621bb2221fcd5c947f35e699137a38a04d4dda9dad065bff8c4a53ec7e7","ssdeep":"768:VBrKPqnLUu1lCsaNjPg1cEsY2ukdyUnuFqsjqLvSaVQi4SccK:vSq31lCJNj+iMHFlmDN+z","tlshash":"b1f2e0aa52454f28f1cb71f5e842d593a15e8f8165e032b5f768e84b24d874c0aefb18","first_seen":"2023-07-23T02:10:07Z","last_seen":"2026-04-01T19:33:44.484575Z","times_seen":211,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/filled/brand-twitter.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/filled/brand-twitter.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 556\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 98ec9fe33b824c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0acbe08aaf03bc45a4c3d79ac8e287f8\"\r\nlast-modified: Sun, 02 Mar 2025 23:42:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, MISS\r\nx-cache-hits: 35131, 0\r\nx-served-by: cache-bfi-krnt7300112-BFI, cache-bma-essb1270021-BMA\r\nx-timer: S1760305479.711917,VS0,VE167\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUw9yP1gMJJANqRocxJC%2FUp5ZIOKZSqjBlDNlD5bvnWB9V3Ar9E3GzlKOqtu1YdCfhMvabeeFOn0wAKsrxBbsoE1jSnWuFpaAfgQ%2Fn9RAQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (765)","md5":"0acbe08aaf03bc45a4c3d79ac8e287f8","sha1":"d9fcc1fae2c26619262b8636982c6a6c9dd2e5ac","sha256":"52e60b21b5cbae744b70843df138ca63149ac6c93e945a9cd8b5215e98f9733f","sha512":"16b4c59c2997fb4388a1a92ec86ed5cc8c2e91bf23f81a93cfdeecbadb5601607cf1a24e78dac4c38508e0b4e00e0490592c7b8fd28ec2e1994728dd5fea8d4c","ssdeep":"","tlshash":"4e1110d8433403b8d7efc473be113588171ff6a2ea202042aa9e5d0c4cfafc4a022964","first_seen":"2025-10-15T04:38:35.669317Z","last_seen":"2025-10-15T04:38:35.669317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ingress.linktr.ee/i/uLZfGRmpj7","fqdn":"ingress.linktr.ee","domain":"linktr.ee","tld":"ee"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.linktr.ee","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 19:13:13 GMT","end":"Mon, 29 Dec 2025 19:13:12 GMT"},"fingerprint":{"sha1":"DF:C0:32:C9:64:42:7A:B3:56:91:BD:68:D3:46:30:9F:62:AD:2E:69","sha256":"F3:D0:67:51:3C:60:43:76:57:5B:B7:44:38:D0:F3:7F:18:0B:CD:BE:1B:CA:EE:6E:42:37:F6:F9:B8:4C:84:49"}}},"request":{"raw":"POST /i/uLZfGRmpj7 HTTP/1.1\r\nHost: ingress.linktr.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1640\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/xml\r\nx-amzn-requestid: 3f67b91b-ae82-5451-afee-d87289e8af1a\r\napigw-requestid: SeK-shpoPHcEPJg=\r\naccept-ranges: bytes\r\ndate: Wed, 15 Oct 2025 04:38:02 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1760503082.744888,VS0,VE793\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\naccess-control-expose-headers: Content-Length, Connection, Date\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=300\r\ncontent-length: 459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (459), with no line terminators","md5":"d123e3e1230861536ebd3fd07868c067","sha1":"bd41372643b00b7f2235bf61686929ec5d270b93","sha256":"1171d754e866884adc9b05c7938759a1b4f4e7a74c3210d58109bb3fb6fed7dc","sha512":"21e87118dd0e7f01b6bbca193a5b532e3bf83cbd1961dd37494d0bd0127ea0f8fb5f5b2675c5f5e3442fd792a4f8a021444c96e5a95a3931900dafc73f6a4269","ssdeep":"","tlshash":"c9f027c43a912c6e0b1062a9fec6b98e360a41b432e570779e9c64c36f4c8c3aa40303","first_seen":"2025-10-15T04:38:35.673587Z","last_seen":"2025-10-15T04:38:35.673587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":98,"dns":56,"connect":13,"send":0,"wait":807,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/202505.1.0/otBannerSdk.js","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /scripttemplates/202505.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 121335\r\ncf-ray: 98ec9fe46a3156b1-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: NAZ3glRN8wQbxaNJl4xrXg==\r\nlast-modified: Thu, 29 May 2025 09:20:14 GMT\r\netag: 0x8DD9E92050BC642\r\nx-ms-request-id: fda05376-b01e-005d-763a-ec7030000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 15433\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":504085,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"18762e5462bba8569d5eea27a8706e5d","sha1":"7251ae3c847a1b71886d2b1b460a9c0247110b07","sha256":"ea84193c3562ce2927329b92fcc12c77ee02e441dcc5f616132f48bf5fbc1bc8","sha512":"1b364a9f857d9851790b93d3370c124ac7ba252cd541f6055505755c6eb8f4bc1f1c62f63cb01737bb509247ec14632415bcc254e626e4b47e3129dba88516a7","ssdeep":"6144:ffKthRZtx7maE7qaDtQK/CsMebppuVW19WNpfp8k2LpFAYPmC:fOx7maE7qa0k9E2fB","tlshash":"4eb4298e7590753587e752b8c027414aba3574acac85806cb44cc5f90bf9f821ea7fbb","first_seen":"2025-05-25T04:56:23.349576Z","last_seen":"2026-04-04T06:54:01.20174Z","times_seen":3291,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/logos/static/ot_guard_logo.svg","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Wed, 08 Oct 2025 12:27:14 GMT\r\nx-ms-request-id: 8228c484-601e-0003-01f9-3a9bd0000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 78070\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98ec9fe5bbbc723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-04-04T11:48:57.524947Z","times_seen":115852,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/logos/static/ot_guard_logo.svg","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Wed, 08 Oct 2025 12:27:14 GMT\r\nx-ms-request-id: 8228c484-601e-0003-01f9-3a9bd0000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 78070\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98ec9fe5dbcb723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-04-04T11:48:57.524947Z","times_seen":115852,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/world-www.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/world-www.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 355\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 98ec9fe2983a569a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"9a6af232b1ccf5cd3074aacf8725dd25\"\r\nlast-modified: Sun, 02 Mar 2025 23:08:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 30353, 1\r\nx-served-by: cache-bfi-kbfi7400040-BFI, cache-bma-essb1270078-BMA\r\nx-timer: S1760169281.257681,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjdYQfi4BvfeTa7ZPM%2FmE3W3EtO7Sn6%2F2FpOzEjjCIA%2FRBSTVHoa7%2BjfujrBsJoAdaJ8sC7RfF1kCX7xZpAEV%2FVYxFE82PyjVNBso9g%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"9a6af232b1ccf5cd3074aacf8725dd25","sha1":"204cc746847a9fb8d26253efde169eb63721c3f2","sha256":"22f72fd6a2cd761b1507dbe85780fed3be2c8bdde22cbd608975463f003b5ae6","sha512":"eec778c68f3c83e6a4c948518e80fdc437db64ec4d14b7fa0635f4a95efd32d2c465f733c1b24de739e22f6b824bf5ee97c815f749d46f39bac0ab573ab41297","ssdeep":"","tlshash":"d3010482d11c815d9a4b47206a1c3030232ea1f32aea72da9c5e262114330acdff7ac0","first_seen":"2025-10-15T04:38:35.683472Z","last_seen":"2025-10-15T04:38:35.683472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/202505.1.0/assets/v2/otPcCenter.json","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /scripttemplates/202505.1.0/assets/v2/otPcCenter.json HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 13135\r\ncf-ray: 98ec9fe55b6e723c-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: tIViGLcTTcwKBPSb0gVpTg==\r\nlast-modified: Thu, 29 May 2025 09:20:03 GMT\r\netag: 0x8DD9E91FE68ADBA\r\nx-ms-request-id: 721d9c73-f01e-005c-0ff9-3a2fec000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 78071\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66003,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4d86eda4254cb73bf41577ca7985fef6","sha1":"6b9fc44e88d431a3608db32aec33b7a37732d095","sha256":"6d60f7d4384173176e1c948a622fd58f78575673c779773303d7e4ab2d21ed51","sha512":"2e56331fbe2abe6ea84abf90035468cad2b9c82c44e43e1cb5bbabe20acd0a5a494a18a5988b7ad60642e341c4b46461d853ee6532acde303a4d09879c9040bd","ssdeep":"768:t2VpDUAEk+ZSMYifJEpuR+ju38VAXrXmQehF:7/II+ju38VyjUF","tlshash":"3253e99b7aa0530afee38b19eb926de87124c81fbd335dedf1424678868d7e18d11508","first_seen":"2025-05-28T09:49:46.997557Z","last_seen":"2026-04-04T06:54:01.147228Z","times_seen":1461,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/202505.1.0/assets/otCommonStyles.css","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /scripttemplates/202505.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncontent-md5: dIH5shy27L66mhu4/gDB5Q==\r\nlast-modified: Thu, 29 May 2025 09:20:24 GMT\r\nx-ms-request-id: 4537b2fe-f01e-003e-2485-3cedcb000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 78071\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98ec9fe56b73723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25850), with no line terminators","md5":"7481f9b21cb6ecbeba9a1bb8fe00c1e5","sha1":"cc10879f24612ba6cdbe4c6440ebb11a9a301ca1","sha256":"a7989213aebcaf40b964d7f6682ab30514a2eca187b9cdd101739903676b2fde","sha512":"02f0eb0e00379df2eecbdc73d7c62bbac3a38d3a0f4566348cd7944f7036ee9bbc7894d3d84fc3fab1dd58a94a533926ae86c778913a84c1167de90cad8e5597","ssdeep":"384:WI8ChnGo09YNHDouelCt7FGAVsqLnwGfg4xqsQMPNE:CYhp6J","tlshash":"f8c2459b38512b1ae7d7c719992139827d11aceffd739ceee005a3784adc3e24c1464a","first_seen":"2025-04-10T07:53:09.727568Z","last_seen":"2026-04-04T11:42:40.799271Z","times_seen":23274,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 23:30:26 GMT","end":"Fri, 09 Jan 2026 00:30:25 GMT"},"fingerprint":{"sha1":"D5:DD:06:ED:75:3A:E2:C9:D0:F6:27:2F:AF:FC:EB:D2:E0:8A:E2:12","sha256":"C6:16:A3:C7:2A:39:35:21:68:98:57:08:BF:C9:6F:84:C5:7A:58:5E:80:F4:E3:06:B0:E0:96:C3:30:2F:F2:08"}}},"request":{"raw":"GET /BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/avif\r\ncontent-length: 799\r\nserver: cloudflare\r\ncf-ray: 98ec9fe61e1776ef-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 132122\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfbtfnusyDYGBTFub9iigeZGkdfb7C9F9CBQfA5-d8DQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=16+1 c=0+1 v=2025.10.7 l=799 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8879c5095aabd31f844cf2d5b762fe6c","sha1":"d266bf12c6768861060c56c4fada4a99c0671619","sha256":"cc3ad95e9c6e00e86caca9be1f4ae6cd072621ade835c9b2d6547ddb438ef5bc","sha512":"a9ed0e271e87e1228171b99e62fcbfdd4816f0c323becf8bbb3aa4b09dc7724ee85b06a6daf78b18b1d3f6c916caef8189c897776c88fcded70f7578b61b19f3","ssdeep":"","tlshash":"b50160f297300e66ce9d03b18d4e87323a1aa93c92b226926c623d0408b4626c868e1c","first_seen":"2025-10-15T04:38:35.704856Z","last_seen":"2025-10-15T04:38:35.704856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 13:01:13 GMT\r\nexpires: Fri, 09 Oct 2026 13:01:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488207\r\nlast-modified: Thu, 14 Sep 2023 00:46:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46552, version 1.0","md5":"74c3556b9dad12fb76f84af53ba69410","sha1":"342edef074482299f72f8f7a8862e6f908bd4137","sha256":"3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1","sha512":"78ae2a421e6aa394f78200187a13f9b8bb313a85dac223d2863c46e4f53393033cbc400b40d2044390f3b79105da41d1a59f81d796561b8dc1c2a7b763bbb9dc","ssdeep":"768:hhTRJqooGnba8+OgF5kjearV36czFCgWWfSkLaLOJc+IfZmmmSn+VoMzQAhX/LS:jT2kuzOgFmjearV3UWfSkQsVEAjdCUdM","tlshash":"f02302f9ca6e8095b3d73fdc14a581185b4e02aa1097fc1beb152eb1cb39d0715eb852","first_seen":"2023-09-16T20:29:46Z","last_seen":"2026-04-04T09:40:54.792295Z","times_seen":6421,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":59,"receive":12,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 13:01:13 GMT\r\nexpires: Fri, 09 Oct 2026 13:01:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488208\r\nlast-modified: Thu, 14 Sep 2023 00:46:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46552, version 1.0","md5":"74c3556b9dad12fb76f84af53ba69410","sha1":"342edef074482299f72f8f7a8862e6f908bd4137","sha256":"3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1","sha512":"78ae2a421e6aa394f78200187a13f9b8bb313a85dac223d2863c46e4f53393033cbc400b40d2044390f3b79105da41d1a59f81d796561b8dc1c2a7b763bbb9dc","ssdeep":"768:hhTRJqooGnba8+OgF5kjearV36czFCgWWfSkLaLOJc+IfZmmmSn+VoMzQAhX/LS:jT2kuzOgFmjearV3UWfSkQsVEAjdCUdM","tlshash":"f02302f9ca6e8095b3d73fdc14a581185b4e02aa1097fc1beb152eb1cb39d0715eb852","first_seen":"2023-09-16T20:29:46Z","last_seen":"2026-04-04T09:40:54.792295Z","times_seen":6421,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/brand-telegram.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/brand-telegram.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 310\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 98ec9fe32b814c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"37d50bdfcb61aafcc21e56c169f4f342\"\r\nlast-modified: Sun, 02 Mar 2025 23:23:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, MISS\r\nx-cache-hits: 1560, 0\r\nx-served-by: cache-bfi-kbfi7400047-BFI, cache-bma-essb1270071-BMA\r\nx-timer: S1760425006.191879,VS0,VE158\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=419d%2Byfn8whgilRFwf2jzfzI1ZHpxilDPdkJHx1PVGGnUJLZm8YGstvs9q7TLwoa26OdptTh5w0%2BDoSuejPiJnFOn1U1fz%2BUDTP%2FWxUKAw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"37d50bdfcb61aafcc21e56c169f4f342","sha1":"361082626efc75639f3ed05f035807c0d0c7d935","sha256":"4a1023bb65efb2a268a3e4740225c369fbdaae87fba3d48c87ea2dd526c4cfbe","sha512":"e2ba855c27dd30935e8f662cf76696527a485a542bc28be8ebe536f815944cef0d932649ef74dc41a4a48e00b2f916858efb93a338359491b33823fd5b1240ec","ssdeep":"","tlshash":"88f0a39ade0c0f2d5a2f811579987554236c7357934f150695ff43301e1e44ce165788","first_seen":"2025-10-15T04:38:35.648075Z","last_seen":"2026-02-13T02:26:47.847737Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 23:30:26 GMT","end":"Fri, 09 Jan 2026 00:30:25 GMT"},"fingerprint":{"sha1":"D5:DD:06:ED:75:3A:E2:C9:D0:F6:27:2F:AF:FC:EB:D2:E0:8A:E2:12","sha256":"C6:16:A3:C7:2A:39:35:21:68:98:57:08:BF:C9:6F:84:C5:7A:58:5E:80:F4:E3:06:B0:E0:96:C3:30:2F:F2:08"}}},"request":{"raw":"GET /BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 799\r\nserver: cloudflare\r\ncf-ray: 98ec9fdefee856b4-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 132121\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfbtfnusyDYGBTFub9iigeZGkdfb7C9F9CBQfA5-d8DQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=16+1 c=0+1 v=2025.10.7 l=799 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8879c5095aabd31f844cf2d5b762fe6c","sha1":"d266bf12c6768861060c56c4fada4a99c0671619","sha256":"cc3ad95e9c6e00e86caca9be1f4ae6cd072621ade835c9b2d6547ddb438ef5bc","sha512":"a9ed0e271e87e1228171b99e62fcbfdd4816f0c323becf8bbb3aa4b09dc7724ee85b06a6daf78b18b1d3f6c916caef8189c897776c88fcded70f7578b61b19f3","ssdeep":"","tlshash":"b50160f297300e66ce9d03b18d4e87323a1aa93c92b226926c623d0408b4626c868e1c","first_seen":"2025-10-15T04:38:35.704856Z","last_seen":"2025-10-15T04:38:35.704856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":15,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 13:01:13 GMT\r\nexpires: Fri, 09 Oct 2026 13:01:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488207\r\nlast-modified: Thu, 14 Sep 2023 00:46:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46552, version 1.0","md5":"74c3556b9dad12fb76f84af53ba69410","sha1":"342edef074482299f72f8f7a8862e6f908bd4137","sha256":"3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1","sha512":"78ae2a421e6aa394f78200187a13f9b8bb313a85dac223d2863c46e4f53393033cbc400b40d2044390f3b79105da41d1a59f81d796561b8dc1c2a7b763bbb9dc","ssdeep":"768:hhTRJqooGnba8+OgF5kjearV36czFCgWWfSkLaLOJc+IfZmmmSn+VoMzQAhX/LS:jT2kuzOgFmjearV3UWfSkQsVEAjdCUdM","tlshash":"f02302f9ca6e8095b3d73fdc14a581185b4e02aa1097fc1beb152eb1cb39d0715eb852","first_seen":"2023-09-16T20:29:46Z","last_seen":"2026-04-04T09:40:54.792295Z","times_seen":6421,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":106,"dns":1,"connect":23,"send":0,"wait":45,"receive":16,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/1570-f0940cc5d44b0452.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/1570-f0940cc5d44b0452.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdcbb1e4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 197601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"6b9231a5a38b561ce60906b9d3028b0d\"\r\nlast-modified: Fri, 03 Oct 2025 06:55:02 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 63, 176\r\nx-served-by: cache-bfi-krnt7300095-BFI, cache-bma-essb1270041-BMA\r\nx-timer: S1760305479.833071,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lFmHOyBfJOjz%2Bu6Yq2CWSPo7rBGaihxixmbntivfaQJ9Jrd5XhHr3%2B8nL70UAYFD7PwV5T3mWLC9WrGk8Us2Mf8Upoy%2BRnjpMFgobjB%2Bg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":46541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46541), with no line terminators","md5":"6b9231a5a38b561ce60906b9d3028b0d","sha1":"6251067c2307d3351722f731627118f4c50cd0f6","sha256":"fa53cd3ae4cf60ea86b4dbe4f19a51042c54274cbb95b4eb6c782b4b01e5bdaa","sha512":"30b6745c11482dbd1a17e1397b74daea7355e444d636eb5a2f3632e4871520f99c5e892f43da10ea78b5b279725ca629c5ac23486ceb9812d455a30f7a650db5","ssdeep":"768:xngsFQKHESDmikGBNCn3COquGVfCFZ2YlMU2:xNZkObOq9c2","tlshash":"df23f98c71d7b1524fd360a4142f230ab37aa9515488d808f972eed1eda5e4da3b7f34","first_seen":"2025-10-07T04:31:31.386685Z","last_seen":"2025-10-15T04:38:35.715559Z","times_seen":8,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/framework-0b885bda87b2d766.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/framework-0b885bda87b2d766.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 47321\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdccb214c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29100\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"c5cf3a75dd57b375516af88b6eb7892e\"\r\nlast-modified: Fri, 03 Oct 2025 06:55:03 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 60, 298\r\nx-served-by: cache-bfi-kbfi7400119-BFI, cache-bma-essb1270021-BMA\r\nx-timer: S1760473980.571066,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSI%2Be5oNGCZVEskmJmTbbMGuwgX%2Fkzoa19wlHtKMTpE0rMQEVZCq2SehLs7HOWaPfXL5wK58ugcBuCgruWZ0v8LFaBavnag3coKGtC7jCg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56787)","md5":"c5cf3a75dd57b375516af88b6eb7892e","sha1":"bc2782757f6deae54ede3bad24ba13ab4c472469","sha256":"c60c4f2d5d5967c4382d61c41f1c7d0640d6cdec2f88b907b41e01feda6cf26b","sha512":"0b208fb1ec9fa683c534131285dd48b13666229c5a9977e538a32c271aed2ed077cbc9c79b1a9812208c016d6d1453c368350f2be38f907754466d1f0ce70e98","ssdeep":"1536:IPB+L1vxEPnsrUU69jVdUuHA/YuFER3DJzWiPsizutKbi/MREcyUmQjiUqpyZK:I5K12PnHp6iA/7FI5Wikizu8mQjiUqYc","tlshash":"18e319ec7986f1e299f352a610af1407737c561ba40c4cb0a150eee935fc45aa27bf8d","first_seen":"2025-10-07T04:31:31.328452Z","last_seen":"2025-11-09T08:41:51.675437Z","times_seen":23,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/world-www.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/world-www.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/static/avatars/blank-avatar.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /static/avatars/blank-avatar.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 283\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 98ec9fe29b794c11-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3194\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0c71d8b753efb839e5d7cb227d62c511\"\r\nlast-modified: Mon, 02 Jun 2025 03:24:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27043, 0\r\nx-served-by: cache-bfi-krnt7300081-BFI, cache-bma-essb1270042-BMA\r\nx-timer: S1760305479.272593,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3k1nRhgz2%2FZ7375Dh2hvAz2PCvgBgiOSVIwz9cUQz39Q2rOSrufLu00pbyuLad2Qqk06dq7iCSVQ%2Bpbq0TuSb6RsU9DKaPLhdkm4rIzT5w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":581,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c71d8b753efb839e5d7cb227d62c511","sha1":"7833d242e1b470c3fe41d8e66cd58f0f4cbac17f","sha256":"04b3535a7c4c0b4b5796e7965806d096dfbf1c5b8b9a992e382df8a0162f8e82","sha512":"17506e540add1dbee996ba1cd4eb5415e6a2fadde6a139530df2ddf9d8f8f0fe7fc8d41307bcd34be62c42250b91080f4f5bb11d11583f321037af505ede8622","ssdeep":"","tlshash":"2df08b74709cd1098b8847081b8f76942027f6cc864dc219f2c4761f345c1db75223ae","first_seen":"2025-06-24T11:27:17.936663Z","last_seen":"2026-04-04T06:48:36.017812Z","times_seen":65,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joinofz.net/","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-15T04:37:59.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"joinofz.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 09:19:49 GMT","end":"Thu, 08 Jan 2026 09:19:48 GMT"},"fingerprint":{"sha1":"52:65:67:B0:D5:A9:60:F3:AA:90:47:9A:6F:1D:A6:D8:9E:CF:F6:89","sha256":"7C:57:E6:3E:A2:3D:07:FD:56:81:51:97:56:FE:0C:88:F8:C7:E5:60:61:B3:A5:74:D2:A9:5A:99:BB:80:96:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\napx-hit: true\r\ncf-placement: local-IAD\r\ncf-ray: 98ec9fd5fa5fea88-IAD\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Oct 2025 04:37:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dxG9c%2F%2FUBXnU4cfzi23AzxgNPkAjgmNVsUhz7jq1GE%2FEWtF4OamHrDrCbxgEuDHGRtUt6cI1OYiv0v0OmYxncdwsY1f9cnZYBIRGK2KU6yXCOpOuboRpIbXmQ%3D%3D\"}]}\r\nserver: Caddy, cloudflare\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105950,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33917)","md5":"6f56c284b5732aed38f905513dd91c7f","sha1":"44cf55f98847f75eb5c5dc9fced545ca16f10d3d","sha256":"0383c0af14ecef9ad8a90a5bb97c4ae38a3ad6810696069b0c8ca24ba98716ea","sha512":"e7e739210bb7d6aa31f051d9582511d1909035ea90cb271fc6dfe0808cf97919080b99b2fbd2f4bc63949c2a80c1a84998f271c97183bcc2d9b366ec9fa459c6","ssdeep":"1536:stjBhe2k4Rhx5NBrxPZYcep5ONoReEhShZD08ITdM1NTeLDbhV4ICxTRq8CQ3b7W:s/aRn07Dh1NTofhV4ICx9AgZs","tlshash":"09a32a33511988b94b0386c476eefe0ee96b9117f3c0d890f8cc49585bea8f7536635a","first_seen":"2025-10-15T04:38:35.727805Z","last_seen":"2025-10-15T04:38:35.727805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":261,"dns":22,"connect":8,"send":0,"wait":444,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/consent-scripts/one-trust.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /consent-scripts/one-trust.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1555\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdcc823569a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 333799\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\netag: \"b92d40afa08c222489f6f150e1464a1e\"\r\nlast-modified: Tue, 27 Aug 2024 02:32:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-meta-surrogate-key: consent-scripts\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5011, 121\r\nx-served-by: cache-bfi-kbfi7400058-BFI, cache-bma-essb1270046-BMA\r\nx-timer: S1760169281.612094,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srCrkUPjEL%2FtESa46mvrqtzoLrmlyjIhnWheaa82QelUUdgIF7nHubdrdkdfIlZPNL%2BDmdo2kDUe%2FrqxACjPg1hyxPWPdB4mXmo8Dlk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3580,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3580), with no line terminators","md5":"b92d40afa08c222489f6f150e1464a1e","sha1":"2ef9fbf197c9ad911d4334ed36ae903a0638b689","sha256":"54b72c1856fb8fe018e5715edf14a8af098a8ef6730fed6616610ebf4745e18d","sha512":"fbee3bb1515ecc9026e56d89abc05d2f5add0eee247934e0bda47085b3ca5323f7ff6fd301630df30bf56a07cf400ad5edbc0e9212e6e94817c5ba955ff174e8","ssdeep":"","tlshash":"2671868cfa1da57002e112e5657fa20df23260687113e0d0a15ee8e2741cdcb6477efa","first_seen":"2024-08-24T15:52:00Z","last_seen":"2025-11-14T10:25:33.256406Z","times_seen":353,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/brand-telegram.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/brand-telegram.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36860\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:45:34 GMT\r\nexpires: Fri, 09 Oct 2026 11:45:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 12 Jul 2023 22:07:37 GMT\r\ncontent-type: font/woff2\r\nage: 492746\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36860, version 1.0","md5":"65aa2c0484ef8245fe5725ce982ff8cc","sha1":"ab4128365bfaecfb5be23f5ef7294354a8a96aea","sha256":"cfbbd0037dbc07a549504172d6c1e6f0f95cb2b57da8b934028b218b35af95b9","sha512":"536213bc23dbfec0bdcc088a8e4c7719763c2a468af2dc422bad1123131599613f996621bb2221fcd5c947f35e699137a38a04d4dda9dad065bff8c4a53ec7e7","ssdeep":"768:VBrKPqnLUu1lCsaNjPg1cEsY2ukdyUnuFqsjqLvSaVQi4SccK:vSq31lCJNj+iMHFlmDN+z","tlshash":"b1f2e0aa52454f28f1cb71f5e842d593a15e8f8165e032b5f768e84b24d874c0aefb18","first_seen":"2023-07-23T02:10:07Z","last_seen":"2026-04-01T19:33:44.484575Z","times_seen":211,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":24,"receive":21,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/e8e2b346edcb140fa45544d015e4b781a17c80b9/_ssgManifest.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/e8e2b346edcb140fa45544d015e4b781a17c80b9/_ssgManifest.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 61\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdc9b174c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29089\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Mon, 13 Oct 2025 21:04:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 221, 0\r\nx-served-by: cache-bfi-krnt7300093-BFI, cache-bma-essb1270072-BMA\r\nx-timer: S1760473991.140546,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0QVlcf7FG5pd%2FsOU%2BHcsX22jjSz2symGYSrYwU594WGcU6DsLYvDLkpzy%2F0G5e8Crpge6XAXeNGR%2FpoIwuQ86sdqygDN1QblwxfwwFnUA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-04-04T11:33:23.740641Z","times_seen":203141,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/follow-ToastMessage.c1979f7bf98b8749.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/follow-ToastMessage.c1979f7bf98b8749.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1482\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 98ec9fe2ab7a4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 197602\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"8d085a1e49c7095a37aefc1fc94f1395\"\r\nlast-modified: Thu, 04 Sep 2025 18:39:49 GMT\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 269\r\nx-served-by: cache-bfi-krnt7300068-BFI, cache-bma-essb1270025-BMA\r\nx-timer: S1760305479.267671,VS0,VE0\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=63no36TNYPC0EBo7OHfYwiFN3vdlUqmZsOeLrrZBHLCACfhOHB1f%2B73N%2BoAJMOmt1Nm5z%2F59I445VwW0K1BT%2BCysKk4kUe0TnWBDy8m%2F5w6Eu7qWEpUDM73ZMMDTbnRZG%2Fg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=990\u0026min_rtt=531\u0026rtt_var=447\u0026sent=807\u0026recv=59\u0026lost=0\u0026retrans=0\u0026sent_bytes=924888\u0026recv_bytes=6685\u0026delivery_rate=66904549\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=115852\u0026ss_exit_bw=66902637\u0026ss_exit_reason=2\u0026cwnd=80042\u0026unsent_bytes=0\u0026cid=7a58c5e5c97a0389\u0026ts=1041\u0026inflight_dur=106\u0026x=54\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3144), with no line terminators","md5":"8d085a1e49c7095a37aefc1fc94f1395","sha1":"7ab5d0382a8992edd4af9c3558c93c17214942a1","sha256":"d1b8c03c0225d8070940cec1eeb470178e6105e6a6dadb97b04a1172d42e0dde","sha512":"f6882abb7005bca3243ee93503ce373fff7c4243331966831c1d7be14704afdbd1c4297bf88dcc7e5dbcc4babec92ff8dcf902c8646fec91dc9aba2cfb506f0d","ssdeep":"","tlshash":"5d51b7a5f590effc486b01d4547ad04ef02d25a49829a5d8f3a7ec600a440b5bdd6b93","first_seen":"2025-09-06T01:35:07.120855Z","last_seen":"2025-10-20T19:34:24.909859Z","times_seen":35,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/consent/d5c19ad0-1f05-4c37-9934-1585c94aab5c/01971fe9-e8ef-761e-8a18-a1f2fe24eb73/en.json","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /consent/d5c19ad0-1f05-4c37-9934-1585c94aab5c/01971fe9-e8ef-761e-8a18-a1f2fe24eb73/en.json HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\ncf-ray: 98ec9fe50b22723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 78072\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DD9F47860A49B4\r\nlast-modified: Fri, 30 May 2025 06:59:29 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: 9tLPtTxl4NxQpM8FC9NsbA==\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 79af097e-f01e-0011-57fb-3ae000000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":186508,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"5602e3712c946969650e74e664087faa","sha1":"08d3345952a6005e79378b8f4855ac7ff5062ed8","sha256":"7b08a260713779f60d0239af753dc2220d56a2a51abd0793da5c30458db2c2e0","sha512":"f3299eb02e495b2656d74d574d4d485b25063226e8384f5369e14c2deee72948abb77772cb633dfcbbdc53297b60d6764a27f3e0a014b171ac06f9ae12ce97fd","ssdeep":"1536:A0UQCmW3NfidBnOoLyNRNuJZUuNwNvNVNvZmZ1NzNyu/knk0gExRqV7wuSlYRwQO:fUQCbdfsruIknkEmuY6QS7B","tlshash":"c704b606daa85cf94f0f03411ca5bb8ee33c4656eea0de5eec4c4e3a81836f55977186","first_seen":"2025-05-30T07:15:34.057126Z","last_seen":"2025-11-14T10:25:33.282812Z","times_seen":115,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/logos/static/ot_company_logo.png","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /logos/static/ot_company_logo.png HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 8666\r\ncf-ray: 98ec9fe5aaad56b1-OSL\r\ncontent-md5: rstrgrQJ65M8PVOYMzpFlA==\r\nlast-modified: Wed, 08 Oct 2025 12:27:17 GMT\r\netag: 0x8DE0666054CA79C\r\nx-ms-request-id: 30154903-501e-0027-3476-386d70000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 10948\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 106, 8-bit/color RGBA, non-interlaced","md5":"aecb6b82b409eb933c3d5398333a4594","sha1":"b3c1e078d55dd660a368b506b8b21024451426ad","sha256":"56615530ca1fa2eb144ef8d4c4bf06604115367f9f4cfff6bad1b4e8f344d3c7","sha512":"5edcf4bb9cbb36501ff21a4e06f86ed542689994823efc1e78697c15e033925df8c817395648653c0c0a754ec840d3d916f0e6c03ae0cc577239bc5749beb60e","ssdeep":"192:X0YIB/s/MyNJNG3id1t8kQBDGGzjOItNasnHpl7qltVHRrcT:kYi/s/MgEaX8kczjO4NaAAb1+T","tlshash":"9102b0de5a39d2039cabc6e730c6d8256f724916862a721acf389d147970ff38250a73","first_seen":"2025-01-28T04:28:53.011067Z","last_seen":"2026-04-04T11:23:46.620918Z","times_seen":24605,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/world-www.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/world-www.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 355\r\ncf-ray: 98ec9fdc5a170b02-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 268\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"9a6af232b1ccf5cd3074aacf8725dd25\"\r\nlast-modified: Sun, 02 Mar 2025 23:08:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 33061, 0\r\nx-served-by: cache-bfi-kbfi7400040-BFI, cache-bma-essb1270071-BMA\r\nx-timer: S1760305479.694087,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BX2hDYJwaHiiieHIKEvNV7hHusVgnGyhMTfNNe8nqzCGzXjTkeDNv6W3IECHpfdmqhhYwT3H2dkLv4PkzaH8DzgXJzqxPZgiKRTY88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":790,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"9a6af232b1ccf5cd3074aacf8725dd25","sha1":"204cc746847a9fb8d26253efde169eb63721c3f2","sha256":"22f72fd6a2cd761b1507dbe85780fed3be2c8bdde22cbd608975463f003b5ae6","sha512":"eec778c68f3c83e6a4c948518e80fdc437db64ec4d14b7fa0635f4a95efd32d2c465f733c1b24de739e22f6b824bf5ee97c815f749d46f39bac0ab573ab41297","ssdeep":"","tlshash":"d3010482d11c815d9a4b47206a1c3030232ea1f32aea72da9c5e262114330acdff7ac0","first_seen":"2025-10-15T04:38:35.683472Z","last_seen":"2025-10-15T04:38:35.683472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36860\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:45:34 GMT\r\nexpires: Fri, 09 Oct 2026 11:45:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 12 Jul 2023 22:07:37 GMT\r\ncontent-type: font/woff2\r\nage: 492746\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36860, version 1.0","md5":"65aa2c0484ef8245fe5725ce982ff8cc","sha1":"ab4128365bfaecfb5be23f5ef7294354a8a96aea","sha256":"cfbbd0037dbc07a549504172d6c1e6f0f95cb2b57da8b934028b218b35af95b9","sha512":"536213bc23dbfec0bdcc088a8e4c7719763c2a468af2dc422bad1123131599613f996621bb2221fcd5c947f35e699137a38a04d4dda9dad065bff8c4a53ec7e7","ssdeep":"768:VBrKPqnLUu1lCsaNjPg1cEsY2ukdyUnuFqsjqLvSaVQi4SccK:vSq31lCJNj+iMHFlmDN+z","tlshash":"b1f2e0aa52454f28f1cb71f5e842d593a15e8f8165e032b5f768e84b24d874c0aefb18","first_seen":"2023-07-23T02:10:07Z","last_seen":"2026-04-01T19:33:44.484575Z","times_seen":211,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":151,"dns":4,"connect":20,"send":0,"wait":36,"receive":8,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/e8e2b346edcb140fa45544d015e4b781a17c80b9/_buildManifest.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/e8e2b346edcb140fa45544d015e4b781a17c80b9/_buildManifest.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 476\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdcab184c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78074\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"0822da5d2334fd267f8bff4a187f9cf1\"\r\nlast-modified: Mon, 13 Oct 2025 21:04:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 224, 0\r\nx-served-by: cache-bfi-krnt7300077-BFI, cache-bma-essb1270045-BMA\r\nx-timer: S1760425006.195600,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fao9XmY0QURAm7PzQIsJTcDkJBY%2F8jlV3IFHBilQljU4677SpGdh3lyCOIMZpSM%2Bx%2BFA2u5sJYC83f9myO%2BPRyONyeDVj%2BI3UCCpkLLtEg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1117), with no line terminators","md5":"0822da5d2334fd267f8bff4a187f9cf1","sha1":"fb6985ac41d192e19d862f40bc3c9028cd3e36f8","sha256":"8a9fafd4d518e0d384ed9559ff9420a25b8f79ef3d8d2bc9053307494d082daf","sha512":"3a0a09785150996cbe55d51cf0cf73c4734c5cae115c5224a9bc890e0ccc7e09f0c1cf9c3ba61ccbf289844f87bea380cf5ba85d20b5ed73eabc086385a03745","ssdeep":"","tlshash":"4a21a643940cdd03ae38fc96305b23229d91ce727abd0a85825cc75c22af3594fd4933","first_seen":"2025-10-08T05:41:18.228806Z","last_seen":"2025-10-15T04:38:35.819244Z","times_seen":5,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/pages/%5Bprofile%5D-dd53b203d0569cf6.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/pages/%5Bprofile%5D-dd53b203d0569cf6.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2640\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdcab194c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 197601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"ca29c03b496626b442d74f89e4bb38c6\"\r\nlast-modified: Wed, 08 Oct 2025 00:33:35 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 53, 179\r\nx-served-by: cache-bfi-kbfi7400048-BFI, cache-bma-essb1270073-BMA\r\nx-timer: S1760305479.832473,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfM7Nh93UcM%2FMv7zjwuiGnf4bpu2W1qCiYLxsUtEaG1cVBTnqbxEUH6vM9EdyS40dhO%2FCm9AlucK7CHB%2FljncIOQ4dTVhrpvJa7t9acytA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6303,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6303), with no line terminators","md5":"ca29c03b496626b442d74f89e4bb38c6","sha1":"340415475758bded3397be97400b53a63fcea2f1","sha256":"87184284a1fa7233a93a7766055c154d6f40808bf6ada6308d8bc629491ce280","sha512":"a86a21bdd648266c8e0a2fefb52f7c8c059dede2fba23abe41d91f7bd2f2f31f99df74f5d9548856c46e02cabc6d6cd11905880f85a929bd868ab2444e455fa0","ssdeep":"96:wzezbafdky/32RKx/ymOx/yomyX+Ds0HVfm5by8nd3xKIS4dUZg60A6ZLcQAd6:ohfdkyPkQ/yH/yovXVMVO+t+6us6","tlshash":"e5d1c9ead9a8fd321ad79977746b530ef424265d205e9014f7aa4c7c281528633f2f0f","first_seen":"2025-10-08T05:41:18.224573Z","last_seen":"2025-10-15T16:29:09.645393Z","times_seen":8,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/pages/_app-214ff224696f680b.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/pages/_app-214ff224696f680b.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 758481\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdcbb1f4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29100\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"07d0236ea405a1928c9e491a71c6e234\"\r\nlast-modified: Mon, 13 Oct 2025 09:11:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 37, 39\r\nx-served-by: cache-bfi-krnt7300039-BFI, cache-bma-essb1270021-BMA\r\nx-timer: S1760473980.194832,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVJr%2FV8%2B%2FMW7o%2FClsZbFZeIVfCYSegNgDWJcW68Bb5YuMU3MtgBMz3ODcqxlQFi8vQr%2FEDQSAnHt9W9f2KFFyyBY8f%2B1YgPt7FciahB0gQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2834489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24815)","md5":"8a61790c3dbf52d82466c80c28237f04","sha1":"d89711bbb8fd1d73fde85cab3f593a013f831518","sha256":"e97b87cb014ec58e1b18adeea17c6f76f32a17f1a7d5f1981a69b4927520e533","sha512":"549633f69eb1aca8c55679dc505e2aebd2662785a7d72753f65750f0d5fddd83f6dad15bc79a5baadb24fd9bcd64ca4baaa4a07b57f60beedace7b52c5da87fe","ssdeep":"12288:J6ftbwq/pvCYFMHhPID+3svaENBAnKkKR2:aMIVJwhwD+3siENBAnKkK0","tlshash":"4b257cd4b341fad802a350d8543f510ef13a3e69a03ca4d0e7e6ddc92a8898d75b6fb5","first_seen":"2025-10-15T04:38:35.83357Z","last_seen":"2025-10-15T04:38:35.83357Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/filled/brand-twitter.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/filled/brand-twitter.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 556\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 98ec9fe2983c569a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0acbe08aaf03bc45a4c3d79ac8e287f8\"\r\nlast-modified: Sun, 02 Mar 2025 23:42:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 37650, 1\r\nx-served-by: cache-bfi-krnt7300112-BFI, cache-bma-essb1270065-BMA\r\nx-timer: S1760425007.847635,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1a0AkClhb994Sf96TrqMZLPpCD%2BZTRwFRqpm6noMcQ3OEKVwXZ0oo0gOkkMDDpyNvjOFT9bsouBDZJVkhXsVJ4vYvt5ABhGLIkCNtTE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (765)","md5":"0acbe08aaf03bc45a4c3d79ac8e287f8","sha1":"d9fcc1fae2c26619262b8636982c6a6c9dd2e5ac","sha256":"52e60b21b5cbae744b70843df138ca63149ac6c93e945a9cd8b5215e98f9733f","sha512":"16b4c59c2997fb4388a1a92ec86ed5cc8c2e91bf23f81a93cfdeecbadb5601607cf1a24e78dac4c38508e0b4e00e0490592c7b8fd28ec2e1994728dd5fea8d4c","ssdeep":"","tlshash":"4e1110d8433403b8d7efc473be113588171ff6a2ea202042aa9e5d0c4cfafc4a022964","first_seen":"2025-10-15T04:38:35.669317Z","last_seen":"2025-10-15T04:38:35.669317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/static/avatars/blank-avatar.svg?io=true\u0026size=avatar-v3_0","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:37:59.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /static/avatars/blank-avatar.svg?io=true\u0026size=avatar-v3_0 HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 283\r\nserver: cloudflare\r\ncf-ray: 98ec9fda895f0b02-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3100\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0c71d8b753efb839e5d7cb227d62c511\"\r\nlast-modified: Mon, 02 Jun 2025 03:24:26 GMT\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 113455, 0\r\nx-served-by: cache-bfi-krnt7300099-BFI, cache-bma-essb1270046-BMA\r\nx-timer: S1760305479.785837,VS0,VE1\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IUBeSNJLXbcdt4HdZWqwp7yp61FSzaMvd1An0sf%2B10G3SU1M521u5ZZDWhUVtKv86z8TEpnJgLMW6dFgQwfPj5krBqTUV21E%2FOc%2Bl97WrogYwf65eba6BiTVRKdnhziJ9EE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=600\u0026min_rtt=459\u0026rtt_var=193\u0026sent=32\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=31364\u0026recv_bytes=1535\u0026delivery_rate=31951855\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=61bc3e86ee726bbc\u0026ts=463\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":581,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c71d8b753efb839e5d7cb227d62c511","sha1":"7833d242e1b470c3fe41d8e66cd58f0f4cbac17f","sha256":"04b3535a7c4c0b4b5796e7965806d096dfbf1c5b8b9a992e382df8a0162f8e82","sha512":"17506e540add1dbee996ba1cd4eb5415e6a2fadde6a139530df2ddf9d8f8f0fe7fc8d41307bcd34be62c42250b91080f4f5bb11d11583f321037af505ede8622","ssdeep":"","tlshash":"2df08b74709cd1098b8847081b8f76942027f6cc864dc219f2c4761f345c1db75223ae","first_seen":"2025-06-24T11:27:17.936663Z","last_seen":"2026-04-04T06:48:36.017812Z","times_seen":65,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"joinofz.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"37.16.16.138","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:37:59.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"joinofz.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 09:19:49 GMT","end":"Thu, 08 Jan 2026 09:19:48 GMT"},"fingerprint":{"sha1":"52:65:67:B0:D5:A9:60:F3:AA:90:47:9A:6F:1D:A6:D8:9E:CF:F6:89","sha256":"7C:57:E6:3E:A2:3D:07:FD:56:81:51:97:56:FE:0C:88:F8:C7:E5:60:61:B3:A5:74:D2:A9:5A:99:BB:80:96:D0"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\napx-hit: true\r\ncache-control: public\r\ncf-ray: 98ec9fd9c9e9ea88-IAD\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Wed, 15 Oct 2025 04:37:59 GMT\r\nexpires: Wed, 15 Oct 2025 05:25:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H81l74KZ1PdVyezr7vsoBa3VHagviaINYJ1R9FRZZM4tKl8lbOah77UezoeM3wU2eg240srdAIqxe%2BJXSVzFAdGTi2KMkcuSGIhh7LNID%2Fttma4tOxC3Bhr3GQ%3D%3D\"}]}\r\nserver: Caddy, cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T11:45:55.568744Z","times_seen":94443,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/main-43194564d3e1c2dc.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/main-43194564d3e1c2dc.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 37488\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdccb204c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78074\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"8437363cae592bcfb47aa2ba86b81b07\"\r\nlast-modified: Thu, 21 Aug 2025 05:10:34 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 146, 407\r\nx-served-by: cache-bfi-krnt7300050-BFI, cache-bma-essb1270069-BMA\r\nx-timer: S1760425006.238459,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlaJvu8YUauVHCCDvOxzehDt4z0Too7uRZItmXOCSdjNNyJ1GXNSv9QnqPvFFdNFOLqrwlu66tEvjXWIXwkPABKh2rsk0Yv%2BrhSOm%2FKniA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132656,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8437363cae592bcfb47aa2ba86b81b07","sha1":"e677a449320a1715817cf8a7c675a9e404942423","sha256":"b50d58cc9466efc03c6c45af0b3ddc392d1be038ba5c1ec2fe71d452f4430fe3","sha512":"d95af8432b344a1030cb835d31a40bbf42f0a231229297e2ff19cf5600b4619f41ff2a2001a12b35225869fa6365663b3cbfedcc2d91c841af08cd2206aed7b4","ssdeep":"1536:DHty14tYfCeLL3c7OSCU1xzJDicVrPBS1Bw78NyQzGzUwHP+SyRwWkoesVKHSoDX:bVeC/VaBw780UwWTSHSmlv6yNN5","tlshash":"e7d319b8b2e2f89206c601d8443f0046f27e1d6a106eb485f399edd779a4d4e90f2f6d","first_seen":"2025-08-21T09:58:43.127221Z","last_seen":"2025-11-09T08:41:51.625388Z","times_seen":52,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 23:30:26 GMT","end":"Fri, 09 Jan 2026 00:30:25 GMT"},"fingerprint":{"sha1":"D5:DD:06:ED:75:3A:E2:C9:D0:F6:27:2F:AF:FC:EB:D2:E0:8A:E2:12","sha256":"C6:16:A3:C7:2A:39:35:21:68:98:57:08:BF:C9:6F:84:C5:7A:58:5E:80:F4:E3:06:B0:E0:96:C3:30:2F:F2:08"}}},"request":{"raw":"GET /BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 799\r\nserver: cloudflare\r\ncf-ray: 98ec9fdefee756b4-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 132121\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfbtfnusyDYGBTFub9iigeZGkdfb7C9F9CBQfA5-d8DQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=16+1 c=0+1 v=2025.10.7 l=799 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8879c5095aabd31f844cf2d5b762fe6c","sha1":"d266bf12c6768861060c56c4fada4a99c0671619","sha256":"cc3ad95e9c6e00e86caca9be1f4ae6cd072621ade835c9b2d6547ddb438ef5bc","sha512":"a9ed0e271e87e1228171b99e62fcbfdd4816f0c323becf8bbb3aa4b09dc7724ee85b06a6daf78b18b1d3f6c916caef8189c897776c88fcded70f7578b61b19f3","ssdeep":"","tlshash":"b50160f297300e66ce9d03b18d4e87323a1aa93c92b226926c623d0408b4626c868e1c","first_seen":"2025-10-15T04:38:35.704856Z","last_seen":"2025-10-15T04:38:35.704856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":16,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/filled/brand-twitter.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/filled/brand-twitter.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/consent/d5c19ad0-1f05-4c37-9934-1585c94aab5c/d5c19ad0-1f05-4c37-9934-1585c94aab5c.json","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /consent/d5c19ad0-1f05-4c37-9934-1585c94aab5c/d5c19ad0-1f05-4c37-9934-1585c94aab5c.json HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\ncf-ray: 98ec9fe3695d723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78073\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DD9F477F2764F7\r\nlast-modified: Fri, 30 May 2025 06:59:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: m4PxeWgiYTGhsUAKq2M+Pg==\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: eb0cdeae-a01e-000c-31f9-3aedbc000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5637,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"6c6248618be63244d15e6da28fed887f","sha1":"fb43458d2019e5466be368d232a422cac1327a7b","sha256":"28e351abd7059fb1ab509fadeee645bb5f87fc1b720de4a3ff5eb57a298ae493","sha512":"424fca47e75683f3449540bfbbdbb6f34ed627a554db78e51fec4ac0f3622ffe3e86bf650173c29cc7bc24fd0d7cdfe3c84b8e70672e6b41c7238f4f12361d90","ssdeep":"96:npyIF40wpoO2Mc4AFCJpuVHGa6Ay4NF9jsQvjkj9j1ZUY2I8IY:FceFMc7FCJpE6v43lsQLUlHMIY","tlshash":"27c1501eb708957ecb9d8394d05ebd0a8bdd6c332189b814d48f0d1c17ab7f328a6667","first_seen":"2025-05-30T07:15:34.056376Z","last_seen":"2025-11-14T10:25:33.258419Z","times_seen":121,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":30,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/logo-assets/favicon.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/logo-assets/favicon.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2503\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbqpUiYXtCL6%2FIaUUwB2aCrrzBeY%2F361SB1qzTvANHGeAz1e%2FAxVYf5ZtQQzmP0Fjbuav4nh5mxeYI7rs1%2FONiTKksPfCAXatKME2GI%3D\"}]}\r\ncf-ray: 98ec9fe4a83f569a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 132122\r\ncache-control: public, max-age=86400\r\netag: \"cfbtfnusyDYGBTFub9iigeZGkdpn0D53V8yuvOR8vEDQ\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-images: internal=ok/- q=0 n=17+0 c=0+0 v=2025.10.3 l=2503 f=false c2=0\r\ncf-placement: local-OSL\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f5b711226a1d1b7fd02896229e55ad87","sha1":"acec225c91a18ad46b4e9f2ca28ef38cda78014a","sha256":"7b03a3c3ef9ab571af4e6b6eee46806a77f3661b9988c3f14f172a2f1cf1adb9","sha512":"4b181b216f61d72009e73503ce836b7a5c7790b68197c11713a0c7983ba89922917740eeaf420988ad58181ab22ec7e126c7bf3c1f4a091ce73ab113fab20b5b","ssdeep":"","tlshash":"e751f98aed00aa520285e6443cfe4bcf9937c7c08596bca5bccdc807a4310f94a581da","first_seen":"2025-10-15T04:38:35.890428Z","last_seen":"2025-10-15T04:38:35.890428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ingress.linktr.ee/i/uLZfGRmpj7","fqdn":"ingress.linktr.ee","domain":"linktr.ee","tld":"ee"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:05.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.linktr.ee","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 19:13:13 GMT","end":"Mon, 29 Dec 2025 19:13:12 GMT"},"fingerprint":{"sha1":"DF:C0:32:C9:64:42:7A:B3:56:91:BD:68:D3:46:30:9F:62:AD:2E:69","sha256":"F3:D0:67:51:3C:60:43:76:57:5B:B7:44:38:D0:F3:7F:18:0B:CD:BE:1B:CA:EE:6E:42:37:F6:F9:B8:4C:84:49"}}},"request":{"raw":"POST /i/uLZfGRmpj7 HTTP/1.1\r\nHost: ingress.linktr.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2131\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/xml\r\nx-amzn-requestid: 47ae187a-c028-520d-b375-7913e7458b83\r\napigw-requestid: SeK_Hg0QvHcEPBA=\r\naccept-ranges: bytes\r\ndate: Wed, 15 Oct 2025 04:38:05 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1760503085.033560,VS0,VE201\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\naccess-control-expose-headers: Content-Length, Connection, Date\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=300\r\ncontent-length: 459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":459,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (459), with no line terminators","md5":"b0d6964928f38c4ad8e7ccc01d3325a0","sha1":"fbcf21167fa47413498cc305fd4157927498a2b7","sha256":"fb2d35ed14abb9f49200d57ce310f182d47bce1ca4b4e6e4a16247ee3c04ca07","sha512":"1d1a2dc211483cc988e821ad5b6eac3f4ce0f526b7238618752bc889db588d5d7b8c54f728db411ed747bb01012b4b3792e75e8504ef1d1fc0512ba0bad70c52","ssdeep":"","tlshash":"a8f0279475a03d6d4b1062e5fa92ba4e350410e022e170bbee5c66c76b88cc39340353","first_seen":"2025-10-15T04:38:35.900333Z","last_seen":"2025-10-15T04:38:35.900333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/6015-18117c08e6054765.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/6015-18117c08e6054765.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15855\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdcab1a4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 197601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"d08f5187dd9d3c6d180efc86e9e2c2b0\"\r\nlast-modified: Tue, 07 Oct 2025 03:34:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 206, 298\r\nx-served-by: cache-bfi-krnt7300095-BFI, cache-bma-essb1270040-BMA\r\nx-timer: S1760305479.833224,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6S5FjU7tHIOB41ZpXvV5IF4aTe5IqUN0oyaLPs2WbxH6ytmH0Zw%2BWuSFbOk%2FyXivCzFR7nKn0Y5dR3BeRXl3jlk1rxgZm0Bcwa3JLEQPA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48212,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47203), with no line terminators","md5":"d08f5187dd9d3c6d180efc86e9e2c2b0","sha1":"91ff93aeca5c5e94d6caaab74c217887aabce373","sha256":"6da615c7b3f8c47b5aa78a793301b090f960588bf60c677524863ad3a3c67239","sha512":"72b6352968ef5d78bdf77d350d3d71957a44694f6987093cab88616cf43ab71e06aa80c72128d0adf2c5bad1cab126b041c6d40e8d19953649590d3ff5244cc6","ssdeep":"768:0SbO5YOnXjIfnLR+giMhM/M9hKYnlQQcWXzIguIBCilf6zX5sVLzWIXjX6oEUabC:9JOnoSETBlQQcWMxFilf6zX5sVLzWejD","tlshash":"58235baaa614de1d1e828b2974ca7f46f1e13d7082408462d86acfbd13f5454ba33ff5","first_seen":"2025-10-07T04:31:31.224407Z","last_seen":"2025-10-15T16:29:09.678698Z","times_seen":11,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/webpack-d53565ea72be22ff.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/webpack-d53565ea72be22ff.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13409\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fdccb224c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 132121\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"400ecdd68e5c419d917f3dab04b54eb3\"\r\nlast-modified: Mon, 13 Oct 2025 09:11:28 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 33, 12\r\nx-served-by: cache-bfi-krnt7300078-BFI, cache-bma-essb1270070-BMA\r\nx-timer: S1760370959.187876,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEJN5uXjkueHACEYRwzZZy%2F3HB7Gjj17YtPX0aJBgVnKiSWkkMiwLrDgNKyuHDcwEpngzDTlz9bORQ6dWXZ%2B6ZdIPmFboDQ7D%2BdVBJHrWw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":34462,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34462), with no line terminators","md5":"400ecdd68e5c419d917f3dab04b54eb3","sha1":"59c06138b2fd6422a5f3c865192ceabf91acac69","sha256":"1de9afeff8661e74ecd53c0cf516b4c6d4a2dde87ba371f83dc12e12436c26fe","sha512":"b5bf194ff1df2f882ff48e8e74e4242cb682dbb72cb00a6baaa26927da775ca90ab2c1217700a00e4339b6c83e9c79703b6066d919b6a82cba2f5d81c1c8b525","ssdeep":"768:uSM9ZaY2IsmewokKqGZ1J86Mo/+7BRSkjKzYmcwO7XxIbT+kobG7Y9:cZHoqgXMN7BRSkmzYmPO73D6o","tlshash":"38f2c9eda34a58573fe038f1ebe2f96ae54a54419c835cc1e0894ebc49b2574c3237b1","first_seen":"2025-10-15T04:38:35.931831Z","last_seen":"2025-10-15T04:38:35.931831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/chunks/profiles-Form-Input.5f84a4dc5f1371b6.js","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/chunks/profiles-Form-Input.5f84a4dc5f1371b6.js HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fe12b504c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 197601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"f5a64435b88f290a6a639c683135578a\"\r\nlast-modified: Thu, 21 Aug 2025 05:10:35 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 111, 264\r\nx-served-by: cache-bfi-kbfi7400053-BFI, cache-bma-essb1270034-BMA\r\nx-timer: S1760305479.163115,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuEdoXYqRCbTeASrbJ6VYykLV6C6pJHGyHDk46p6xnpZNDGTIV884gyvJe2BlEaCa2KLlRxiTGQZmq5rz3EX4ISQh4qW%2B0xUQR07uhv7Vw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2338), with no line terminators","md5":"f5a64435b88f290a6a639c683135578a","sha1":"bf735b732a3afc8152bfd341d8fe120c71bcb87b","sha256":"87683a994bf62a64112a6dd3dec02877eb24c538e6f1b0c47d1781dd89b01c5b","sha512":"3cfb16e6428577d2cf51dc1cf4834eb9429d7d8f71b9de47537db12d3f677d794dd40ec34b7baf82bb3871a9391e1fddecc470340ae8d2a6b0b58e477855756a","ssdeep":"","tlshash":"7241c548f991ffdac0a345e061aee007f10a2701ce37a466f7e4a84086442eb7b56f87","first_seen":"2025-08-21T09:58:43.104441Z","last_seen":"2025-11-09T08:41:51.680015Z","times_seen":63,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/static/avatars/blank-avatar.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /static/avatars/blank-avatar.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/otSDKStub.js","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8536\r\ncf-ray: 98ec9fdf3fc256b1-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: LZaNdI/OX6E45KR6gstApA==\r\nlast-modified: Wed, 08 Oct 2025 12:26:57 GMT\r\netag: 0x8DE0665F93F6EEB\r\nx-ms-request-id: 02a4bc64-e01e-0050-6574-38b8e4000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 39442\r\nexpires: Thu, 16 Oct 2025 04:38:00 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25885)","md5":"f266bedfac21857dedcec1f66506eb67","sha1":"9b0f6bb138b3b96c6c285aa22f0292c262d057a0","sha256":"d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768","sha512":"92818623cef9d937577921b4a1ad7b353b12962086e8705ebe87fb5f085189826a9cda7e9c9efcbc01ebd69e8ca30281190ecfa78b5d96892d74265f2a11a2c2","ssdeep":"384:8Tg8XNbpLx6jhA5SNYbGr1Uci0FPvfC5mC1X2cqKpQinGHKJxEV88y:agKFLxUhA5SNGsUci0tDCZqgyy","tlshash":"cfc2f8ddb140fe3446d3a19c5a3be25a723b746d34869064b8a4ece0247cc4f6533bb6","first_seen":"2025-10-06T04:17:24.407426Z","last_seen":"2026-04-01T06:47:16.882391Z","times_seen":11500,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":39,"dns":20,"connect":1,"send":0,"wait":19,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/css/61a270f92fc8ec15.css","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://joinofz.net/","date":"2025-10-15T04:37:59.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/css/61a270f92fc8ec15.css HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: text/css\r\ncf-ray: 98ec9fda895e0b02-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 197601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\netag: \"3dc4a1e71b0e8273aea14de6a6c17d3e\"\r\nlast-modified: Thu, 09 Oct 2025 17:46:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 18, 15\r\nx-served-by: cache-bfi-krnt7300068-BFI, cache-bma-essb1270024-BMA\r\nx-timer: S1760305479.681839,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mfd7Zx4cEhMevDpqLYQI54FgUPDy%2Fc1Yx6%2FiG47UiqCHEE8hJaAsJQrf7%2F3VKP0o7OwYFeP1vpTzwcOvbFANdprhOGPh4pGYbdKGDro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36698)","md5":"76067e0850267bf22dbe7d840c68eff5","sha1":"f3ad7cbdf6b4281541fa6f015a6a601e87d0f4a2","sha256":"a3a6e85563a8b4f4e01faf5361f13f41821b5e13627edbe0bbe105a73ebe72ff","sha512":"38fc628947ec1750436298f88bcd7a89d8325792c257f3635fc6a56c6baa27648460ba125331bf4772c1d5ce1e44bf4a7c639efac63234737e877047298d5bd3","ssdeep":"3072:AP6tuHZxhYz81ehhKlzhOQyj5eBYgHh/uyQNvpKR+CJbB8yFFe0U89+D8O/1vwyJ:AP6tuH281ehhKlzhOQyj5eBYgHh/uyQH","tlshash":"3ee3cb5f5a66103fbc23c1f1d2e4adac712ba882ee350af9bd52293457c17f50da3624","first_seen":"2025-10-15T04:38:35.972077Z","last_seen":"2025-10-15T04:38:35.972077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":172,"dns":153,"connect":1,"send":0,"wait":248,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.production.linktr.ee/profiles/_next/static/images/natazia-500fa381f413af903cdd676678c3bf65.webp","fqdn":"assets.production.linktr.ee","domain":"linktr.ee","tld":"ee"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.459Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /profiles/_next/static/images/natazia-500fa381f413af903cdd676678c3bf65.webp HTTP/1.1\r\nHost: assets.production.linktr.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/filled/brand-twitter.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/filled/brand-twitter.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 556\r\ncf-ray: 98ec9fdc5a1a0b02-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0acbe08aaf03bc45a4c3d79ac8e287f8\"\r\nlast-modified: Sun, 02 Mar 2025 23:42:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, MISS\r\nx-cache-hits: 35131, 0\r\nx-served-by: cache-bfi-krnt7300112-BFI, cache-bma-essb1270021-BMA\r\nx-timer: S1760305479.711917,VS0,VE167\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbOu%2B4XWSEd2XB0XQ4clQZtbwPqrw9x0JLMOllJt7yOWXSqcDoCqunp%2F9gbsyIM7T%2FUIa4s%2BLC%2FW5W2ynw5PsDB%2BZHTWKrLCJsdkRiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (765)","md5":"0acbe08aaf03bc45a4c3d79ac8e287f8","sha1":"d9fcc1fae2c26619262b8636982c6a6c9dd2e5ac","sha256":"52e60b21b5cbae744b70843df138ca63149ac6c93e945a9cd8b5215e98f9733f","sha512":"16b4c59c2997fb4388a1a92ec86ed5cc8c2e91bf23f81a93cfdeecbadb5601607cf1a24e78dac4c38508e0b4e00e0490592c7b8fd28ec2e1994728dd5fea8d4c","ssdeep":"","tlshash":"4e1110d8433403b8d7efc473be113588171ff6a2ea202042aa9e5d0c4cfafc4a022964","first_seen":"2025-10-15T04:38:35.669317Z","last_seen":"2025-10-15T04:38:35.669317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 13:01:13 GMT\r\nexpires: Fri, 09 Oct 2026 13:01:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488208\r\nlast-modified: Thu, 14 Sep 2023 00:46:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46552, version 1.0","md5":"74c3556b9dad12fb76f84af53ba69410","sha1":"342edef074482299f72f8f7a8862e6f908bd4137","sha256":"3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1","sha512":"78ae2a421e6aa394f78200187a13f9b8bb313a85dac223d2863c46e4f53393033cbc400b40d2044390f3b79105da41d1a59f81d796561b8dc1c2a7b763bbb9dc","ssdeep":"768:hhTRJqooGnba8+OgF5kjearV36czFCgWWfSkLaLOJc+IfZmmmSn+VoMzQAhX/LS:jT2kuzOgFmjearV3UWfSkQsVEAjdCUdM","tlshash":"f02302f9ca6e8095b3d73fdc14a581185b4e02aa1097fc1beb152eb1cb39d0715eb852","first_seen":"2023-09-16T20:29:46Z","last_seen":"2026-04-04T09:40:54.792295Z","times_seen":6421,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.production.linktr.ee/profiles/_next/static/images/natazia-500fa381f413af903cdd676678c3bf65.webp","fqdn":"assets.production.linktr.ee","domain":"linktr.ee","tld":"ee"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"assets.production.linktr.ee","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 10:23:00 GMT","end":"Sun, 14 Dec 2025 10:22:59 GMT"},"fingerprint":{"sha1":"FE:B9:04:1C:6D:DB:C3:A8:27:15:F9:7B:52:56:22:4E:03:86:EE:6F","sha256":"CD:AA:9B:87:B4:7A:90:D8:8C:15:23:C1:5A:39:35:B4:9F:12:4A:C1:2A:88:2A:EA:EC:EB:10:AB:13:D6:04:F4"}}},"request":{"raw":"GET /profiles/_next/static/images/natazia-500fa381f413af903cdd676678c3bf65.webp HTTP/1.1\r\nHost: assets.production.linktr.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 11 Oct 2024 16:56:02 GMT\r\netag: \"84eeeb08fd5fa6906817ec0f165f43ca\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: binary/octet-stream\r\nserver: AmazonS3\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\nage: 6445323\r\nx-served-by: cache-bfi-kbfi7400069-BFI, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3698, 27179\r\nx-timer: S1760503082.591112,VS0,VE0\r\nvary: Origin\r\ncontent-length: 18764\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"84eeeb08fd5fa6906817ec0f165f43ca","sha1":"2e740ad4d41f70c7783252fdc4c7cc0e4f56ef74","sha256":"d731d41882a023e3c9f8ef9c8a7b0003991a0c2976f6a20990d1eca4ec90d439","sha512":"033f4ed0ac572c611c15b51e85e9fac28da618af80b618f21f22ee2c1f0e2bd89cf7089eb6f142def73a74307893ffbc157ed8fbe3bc1dd56f8ffd8e96af0fcc","ssdeep":"384:jEAygpGse8TZxh/k8wcWh7L3N0euWPvLpQ2tq10W:jEAywxZxh/k2aJLptG","tlshash":"3582c0ca87528150fe0f43fa909b84cad03f106aa47a7a57a027661df49f2735d6079f","first_seen":"2024-11-22T14:54:42.908757Z","last_seen":"2026-04-04T06:48:36.018707Z","times_seen":358,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":110,"dns":26,"connect":26,"send":0,"wait":26,"receive":5,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 23:30:26 GMT","end":"Fri, 09 Jan 2026 00:30:25 GMT"},"fingerprint":{"sha1":"D5:DD:06:ED:75:3A:E2:C9:D0:F6:27:2F:AF:FC:EB:D2:E0:8A:E2:12","sha256":"C6:16:A3:C7:2A:39:35:21:68:98:57:08:BF:C9:6F:84:C5:7A:58:5E:80:F4:E3:06:B0:E0:96:C3:30:2F:F2:08"}}},"request":{"raw":"GET /BvxsxDQYm7wHiejDRVkgTA/3e2cab84-74e7-417a-1ed1-be63c7f65700/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/avif\r\ncontent-length: 799\r\nserver: cloudflare\r\ncf-ray: 98ec9fe61e1976ef-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 132122\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfbtfnusyDYGBTFub9iigeZGkdfb7C9F9CBQfA5-d8DQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=16+1 c=0+1 v=2025.10.7 l=799 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8879c5095aabd31f844cf2d5b762fe6c","sha1":"d266bf12c6768861060c56c4fada4a99c0671619","sha256":"cc3ad95e9c6e00e86caca9be1f4ae6cd072621ade835c9b2d6547ddb438ef5bc","sha512":"a9ed0e271e87e1228171b99e62fcbfdd4816f0c323becf8bbb3aa4b09dc7724ee85b06a6daf78b18b1d3f6c916caef8189c897776c88fcded70f7578b61b19f3","ssdeep":"","tlshash":"b50160f297300e66ce9d03b18d4e87323a1aa93c92b226926c623d0408b4626c868e1c","first_seen":"2025-10-15T04:38:35.704856Z","last_seen":"2025-10-15T04:38:35.704856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/brand-telegram.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:00.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/brand-telegram.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 310\r\ncf-ray: 98ec9fdc5a180b02-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"37d50bdfcb61aafcc21e56c169f4f342\"\r\nlast-modified: Sun, 02 Mar 2025 23:23:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, MISS\r\nx-cache-hits: 1560, 0\r\nx-served-by: cache-bfi-kbfi7400047-BFI, cache-bma-essb1270071-BMA\r\nx-timer: S1760425006.191879,VS0,VE158\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FD6AEMb7CK65acWha9mpc4u%2FfC8NX2vKFp%2B%2FhL4A1STztlP4cXLK7s3CIcsACOOOF6rZN8arZe6G21f8m9CZSkB9NoGyXDdv2c%2BT24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":442,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"37d50bdfcb61aafcc21e56c169f4f342","sha1":"361082626efc75639f3ed05f035807c0d0c7d935","sha256":"4a1023bb65efb2a268a3e4740225c369fbdaae87fba3d48c87ea2dd526c4cfbe","sha512":"e2ba855c27dd30935e8f662cf76696527a485a542bc28be8ebe536f815944cef0d932649ef74dc41a4a48e00b2f916858efb93a338359491b33823fd5b1240ec","ssdeep":"","tlshash":"88f0a39ade0c0f2d5a2f811579987554236c7357934f150695ff43301e1e44ce165788","first_seen":"2025-10-15T04:38:35.648075Z","last_seen":"2026-02-13T02:26:47.847737Z","times_seen":3,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/cep/cep.min.js?v2","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /cep/cep.min.js?v2 HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3381\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: 98ec9fe2a83d569a-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2724\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"7260008feb9b6d2690740d0ab68dadcf\"\r\nlast-modified: Wed, 17 Sep 2025 08:06:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-meta-surrogate-key: client-event-producer\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 221, 2\r\nx-served-by: cache-bfi-kbfi7400051-BFI, cache-bma-essb1270038-BMA\r\nx-timer: S1760169281.240000,VS0,VE0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLtay%2FcEynajlOGJFWn659RLjf5Sq2%2FTydl%2B8TNSVD7u08Sme3fkOgsZeDW8P3SGku9Kig6xkJafvqoLOP4c%2BhjHy%2FibLizldkoNjLs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9765)","md5":"7260008feb9b6d2690740d0ab68dadcf","sha1":"d919ea7922ae455492b9cd17418d35bbeaaad9f4","sha256":"d0c2458c953a0cee3638d5cc1faea830837eca2790ca28509ce2dc443338ace2","sha512":"9ea23bedb37ffdcb62c91ad17e3460113d7847cda54795b3f7ee6f481c93786ec87786c0546d56a2971c59d88873279c05012313d48f25224b81ccb646fda306","ssdeep":"192:4srSxY+HdCxo6iNwAV8AxtqlyvdT6sKuH1WWwHokoEvMhxoe:VrShHdCjm9VzYlU6sKuH1WWuoevMhxoe","tlshash":"2312d845f145b5b20692b0a4223f9305b37f1a4531da8529a27ad8d13e28c1f953bfff","first_seen":"2025-09-17T18:56:53.492157Z","last_seen":"2025-11-04T10:54:45.987735Z","times_seen":45,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/dmsans/v14/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36860\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:45:34 GMT\r\nexpires: Fri, 09 Oct 2026 11:45:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 12 Jul 2023 22:07:37 GMT\r\ncontent-type: font/woff2\r\nage: 492747\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36860, version 1.0","md5":"65aa2c0484ef8245fe5725ce982ff8cc","sha1":"ab4128365bfaecfb5be23f5ef7294354a8a96aea","sha256":"cfbbd0037dbc07a549504172d6c1e6f0f95cb2b57da8b934028b218b35af95b9","sha512":"536213bc23dbfec0bdcc088a8e4c7719763c2a468af2dc422bad1123131599613f996621bb2221fcd5c947f35e699137a38a04d4dda9dad065bff8c4a53ec7e7","ssdeep":"768:VBrKPqnLUu1lCsaNjPg1cEsY2ukdyUnuFqsjqLvSaVQi4SccK:vSq31lCJNj+iMHFlmDN+z","tlshash":"b1f2e0aa52454f28f1cb71f5e842d593a15e8f8165e032b5f768e84b24d874c0aefb18","first_seen":"2023-07-23T02:10:07Z","last_seen":"2026-04-01T19:33:44.484575Z","times_seen":211,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98ec9fe44a4d723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-04-04T11:48:57.5567Z","times_seen":104125,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/202505.1.0/assets/otFlat.json","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /scripttemplates/202505.1.0/assets/otFlat.json HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 3145\r\ncf-ray: 98ec9fe55b67723c-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: CvkhhrtIEUTD4ezcIUQkTQ==\r\nlast-modified: Thu, 29 May 2025 09:19:57 GMT\r\netag: 0x8DD9E91FB3142CB\r\nx-ms-request-id: 25e570b5-701e-0052-4ef9-3a065c000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 78071\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15345,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a5898ee8b5c59336dc3586e1612b963a","sha1":"52865e87ce29c41523fc31b64cc4a9991777a45f","sha256":"1e05381160d3bc508aae36ca5a6f0ade2d359ebd1f3d2a051b7c6de6b151bba7","sha512":"1657317e9239fd86ebfdd4d91faf3a7afff321bb5a9c602f4d5804e1ec291873eb3316bb40867a873a7c39697561c8bbb62e517c834340a6488255af9525e27f","ssdeep":"384:KeD0cGDjbn42OhOT85csXf1NFyNUV/OoH6iAHyPtJJAR:KeDia/i","tlshash":"376276523e104b29e1ebcb991883b5d835327d8bfd33a8dd924da3b842ed2f50d26745","first_seen":"2025-05-25T04:56:23.337501Z","last_seen":"2026-04-04T11:47:19.25613Z","times_seen":13321,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/logos/static/powered_by_logo.svg","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: Y+c301RBZNK39PvKQWrIBw==\r\nlast-modified: Wed, 08 Oct 2025 12:27:18 GMT\r\nx-ms-request-id: 08d7f27b-401e-0004-2790-38f7b3000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 7176\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98ec9fe5aaaf56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-04-04T11:48:57.515765Z","times_seen":117018,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/tabler-icons/outline/world-www.svg","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /tabler-icons/outline/world-www.svg HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 355\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: 98ec9fe32b804c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"9a6af232b1ccf5cd3074aacf8725dd25\"\r\nlast-modified: Sun, 02 Mar 2025 23:08:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-placement: local-OSL\r\nx-amz-server-side-encryption: AES256\r\nx-cache: HIT, HIT\r\nx-cache-hits: 33061, 0\r\nx-served-by: cache-bfi-kbfi7400040-BFI, cache-bma-essb1270071-BMA\r\nx-timer: S1760305479.694087,VS0,VE1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKt0P0IzKhSghRSkwoAKmiRPk1hYkGdqZPtma9UJzF76Z3%2BrsyzrtsncroImt51tmxbAhYVa9bazUDbaxpx0KWc1YyfqSqDBXOqrwTueWQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"9a6af232b1ccf5cd3074aacf8725dd25","sha1":"204cc746847a9fb8d26253efde169eb63721c3f2","sha256":"22f72fd6a2cd761b1507dbe85780fed3be2c8bdde22cbd608975463f003b5ae6","sha512":"eec778c68f3c83e6a4c948518e80fdc437db64ec4d14b7fa0635f4a95efd32d2c465f733c1b24de739e22f6b824bf5ee97c815f749d46f39bac0ab573ab41297","ssdeep":"","tlshash":"d3010482d11c815d9a4b47206a1c3030232ea1f32aea72da9c5e262114330acdff7ac0","first_seen":"2025-10-15T04:38:35.683472Z","last_seen":"2025-10-15T04:38:35.683472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.joinofz.net/profiles/_next/static/logo-assets/web-app-manifest-512x512.png","fqdn":"www.joinofz.net","domain":"joinofz.net","tld":"net"},"ip":{"addr":"172.67.181.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.joinofz.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:26:10 GMT","end":"Thu, 08 Jan 2026 10:26:02 GMT"},"fingerprint":{"sha1":"62:50:4D:0F:42:D3:37:C7:FA:AD:04:28:49:E7:5E:07:F5:C6:4D:86","sha256":"D3:74:CF:06:60:6F:CF:FD:20:DA:1F:AF:0A:EB:A2:46:FA:6E:75:11:BA:9D:37:9E:53:83:35:6F:DF:0A:50:85"}}},"request":{"raw":"GET /profiles/_next/static/logo-assets/web-app-manifest-512x512.png HTTP/1.1\r\nHost: www.joinofz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://joinofz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2503\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RnbmKS4XmjzK0jI0R1hdGh7CzNx%2FXdE%2BfhDMRH100VhjAXcgQDbfUKNvys8TOdEWiq6BG4DLrs3n5duivxcgrMSpt7VLELo%2FtGJeP7Q%3D\"}]}\r\ncf-ray: 98ec9fe4a83e569a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 132122\r\ncache-control: public, max-age=86400\r\netag: \"cfbtfnusyDYGBTFub9iigeZGkdpn0D53V8yuvOR8vEDQ\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-images: internal=ok/- q=0 n=17+0 c=0+0 v=2025.10.3 l=2503 f=false c2=0\r\ncf-placement: local-OSL\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f5b711226a1d1b7fd02896229e55ad87","sha1":"acec225c91a18ad46b4e9f2ca28ef38cda78014a","sha256":"7b03a3c3ef9ab571af4e6b6eee46806a77f3661b9988c3f14f172a2f1cf1adb9","sha512":"4b181b216f61d72009e73503ce836b7a5c7790b68197c11713a0c7983ba89922917740eeaf420988ad58181ab22ec7e126c7bf3c1f4a091ce73ab113fab20b5b","ssdeep":"","tlshash":"e751f98aed00aa520285e6443cfe4bcf9937c7c08596bca5bccdc807a4310f94a581da","first_seen":"2025-10-15T04:38:35.890428Z","last_seen":"2025-10-15T04:38:35.890428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"www.joinofz.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-au.onetrust.com/scripttemplates/202505.1.0/assets/otCookieSettingsButton.json","fqdn":"cdn-au.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://joinofz.net/","date":"2025-10-15T04:38:01.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 22:12:54 GMT","end":"Wed, 31 Dec 2025 23:12:48 GMT"},"fingerprint":{"sha1":"7A:4F:9A:73:08:23:59:00:15:6D:50:11:8D:AF:82:8F:0E:3E:75:CE","sha256":"BF:25:91:45:2A:60:21:E8:08:A9:CF:AB:FD:85:ED:FB:57:59:21:E8:47:53:A8:E4:D8:4E:0E:92:BB:92:DE:00"}}},"request":{"raw":"GET /scripttemplates/202505.1.0/assets/otCookieSettingsButton.json HTTP/1.1\r\nHost: cdn-au.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://joinofz.net/\r\nOrigin: https://joinofz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 04:38:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 1774\r\ncf-ray: 98ec9fe56b70723c-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: MFa7aLCpwb6f6ALJC+sdGQ==\r\nlast-modified: Thu, 29 May 2025 09:20:02 GMT\r\netag: 0x8DD9E91FDB3E42B\r\nx-ms-request-id: ffbb4300-101e-0009-55fb-3a3f67000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 78071\r\nexpires: Thu, 16 Oct 2025 04:38:01 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4883,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"70f297c7753238c8156a7ace918d6336","sha1":"41594615c6e15642208b26f337cbceaef4a9d152","sha256":"2ea5d38584b2c2af315aeb033434f8bdbb29fcfc5693bc349f05b5db8be51771","sha512":"646e7cb0ebb495f9842277454288bb82210771013d05e8594451e24a6e443aa51bceb6dd21e1e397917e00cd7dded7793d7ba9f48b12b9b08644af6c0b37bf7a","ssdeep":"96:jb+9cRBftWSrJehL8mS0790bnC43JI5J5b:QcRBfYS9eh4mJInC43JI5J5b","tlshash":"dfa17422d549276d510ba2855fd5644fa81992c3ba2638cd334db9f30f8b38f0366ec6","first_seen":"2025-04-16T17:10:38.291197Z","last_seen":"2026-04-04T08:01:11.110447Z","times_seen":7650,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
