{"report_id":"ac7eec6f-40b0-4e24-ac21-bb8d68836e6d","version":6,"status":"done","tags":[],"date":"2026-03-05T01:01:52Z","url":{"schema":"http","addr":"pyramidsadmin.legionagency.cloud","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/login","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"title":"PYRAMIDS AIRLINES","dom":{"size":18799,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14897)","md5":"49e27782f0b62e70335239f10ebd929e","sha1":"a6cb47faa015b5746281810a8da62e57bea740c1","sha256":"e3fbbaa2d98a835719c631c9642625917d44fb4026901a1c38ac040365c14cd0","sha512":"6e3bdea297621e3ce6f9e2b8a1e3fe815e415173805f75258315d95a85894f8aa0e99fff77fd2b4e9797133d7b6725af449fbf3a0f241788b0fac4d1d6d85a8f","ssdeep":"384:axArbOx05nrGPKJgg8T4xksc64Jysq7vFSpYE:nI0rGV4xksc64Jysq7vFIYE","tlshash":"d6826690b40c12785d3bab11eec8a73cd125f542af524826b10d048af9d6ff639f6f99","dom_hash":"domhash226702a198ca4acaafd13d55a42ca8eb","first_seen":"2026-03-05T01:01:57.280253Z","last_seen":"2026-03-05T01:01:57.280253Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pyramidsadmin.legionagency.cloud","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T01:01:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"pyramidsadmin.legionagency.cloud","ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-03-05T01:01:53.347002Z","last_seen":"2026-03-05T01:01:53.347002Z","alert_count":0,"request_count":15,"received_data":1809701,"sent_data":7212,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-09T00:47:54.926893Z","times_seen":377320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"00e68167eac8ab355c30aeffa1632179","sha1":"d5fb3a0064d3fab578e523c99389281113e0f639","sha256":"b28014c6247f6169c916c12f6a499262371efe53c3f3b7171d414d5b2ef3a254","sha512":"716e37709f08d2aa23af78938148f35c8aefc5fd88191095ac73b7d868c1dd49d517fa4b7ab255c1cc346c84f60ad9911203e162ddb01946781611c19017a84c","ssdeep":"","tlshash":"1631381f1af960054c27b0390f9d28d01a6469b73739add27e6c1114af52d383abafe9","size":1649,"data":"","first_seen":"2026-03-05T01:01:57.299718Z","last_seen":"2026-03-05T01:18:53.285011Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/react-vendor-DtFEaf9-.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ba7202b836b3df03dc70b71f7223fbb7","sha1":"948b86354baa1f8cccf97f31ae02fc7fdc23b08f","sha256":"1e2d6f5a719a7a575054990bd2de73a8a883386aceb09ce3f9a5b5b514af381b","sha512":"072d463c0dcecdde3de8d70e82457b093da4a57afc263beac95dc17d2f9e933584ce715d1822dc4343d217166615545a8c7cf0e1230f9df2c75094aa7ef4ed22","ssdeep":"768:RSRDA/spKS2gD50g63zYYIoNZP8t9Ave+76br1JgIR00yo+7OtZ:svD6zfZNZx971j4","tlshash":"3c2309b97291b0614feb126140bb4056f3b92cf9245d8032b2ace8ae35f4d5c517bfb9","size":47458,"data":"","first_seen":"2026-03-05T01:01:57.291732Z","last_seen":"2026-03-05T01:18:53.272326Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/ui-vendor-C46Mnie0.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ebd628d3c364de7bece994b20b810620","sha1":"85c01dddabfd8b948a5e53fc99fc777ee77c2287","sha256":"faaf495248f8d6839db2867fa043be70033035423e269a3c1fbc58b5eb5cf200","sha512":"01cb02487409f506dd717db9043c3906224c2b4914c10db812eb72009cb16d6341d4dc3135d972962e651a7580f00bfe900d1fb89e8dc93dfb5d8d89b16829fe","ssdeep":"3072:d1YFBv8Vo69S8SZIzuqQXuAdXaEW3rHkB/:QFBv8VP9SVPq0zdXaET","tlshash":"cdd32bc972917126d3d785d8846f0640773a19983009c4acb63eeddb6d2240baabbf7d","size":135255,"data":"","first_seen":"2026-03-05T01:01:57.282553Z","last_seen":"2026-03-05T01:18:53.267113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/form-vendor--JiFr3Ae.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"db8b9ed30a783ca32edbb1fe66937103","sha1":"8d18c7890a1763948fba8d86f93047e2df83942f","sha256":"118d3a37badbc508e1a2925a26b7ff046c6d27a5ecef20fc728efa451b3ca07e","sha512":"b114216fbc9eadf6915159c4c6c59e7959fa80abb6508d216bbd8fcb32b831f9881481576db0ef537bef97de57a31625a7801cc83e72b1d570be964aa477d79e","ssdeep":"1536:KKezeF81f6ZECNPzUmCzQPVEK5bwZsZ9d/h5EEQszxwUudRnMb/PUbXycA7Mbx2D:KKezea1f6ZECNPAl8vvzNNwNdR52D","tlshash":"cb931a8670e6ac3a5bf614e520be0209f73a1c143c79d890e67c4ac67a97c55b1b3f1e","size":97494,"data":"","first_seen":"2026-03-05T01:01:57.29342Z","last_seen":"2026-03-05T01:18:53.263597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/index-2Xl8rse9.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f45de248060d03285593f65ff1333e4","sha1":"df22cff7fd12f4f2a668217786b860c6f267644e","sha256":"8a62a313a90a31f341748c204e45c9fdfa8682fbc2b19993eb175f12d4e1d7a9","sha512":"8b2960258f8b56cd8f5d54f948c1c12cd9bdc4134f9dda98f6749cbcc5724edcbd805f53ccefce16fcf9497b744faacd21bf6801916b6b7648e11f89559d568d","ssdeep":"12288:mdYCugh7HB5YhkOEbnyR0hwntUke04AYHUar3CBG:0dIEbyusb4VN+U","tlshash":"d8b47dc87085b669ab7b09e5507f410a753d2e12b40d88a0f138ec7d3ab4586b1b7fed","size":516017,"data":"","first_seen":"2026-03-05T01:01:57.288505Z","last_seen":"2026-03-05T01:18:53.279423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/state-vendor-D3iv93UT.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9520087efbf6cc8ba1b78ceccd28f4dc","sha1":"1cf10965a8a095180c6649e1bbdd8570a9ed1da2","sha256":"e51f92c673f227a822c96783d317f007a9787eaca4a21cdb1851ace9dbb48410","sha512":"5a32ba8fc1f4654b56af3899408b5bc654d11be275e46fafe49514747fddfb63a3acf22c172d9448f4dafbd536f9294ce9e5fb17891dd2423f157c686d5eb6ae","ssdeep":"768:lFFRARPwn+sX6N7xJK697RAL+GTNgCQJFA4BjL07IDvpeS/RdHVORECRUcgHlqmL:VGUiU7IL2Oj8LH/e","tlshash":"1023f9d531c2f1336be344a2903f4015f2356d64740d9018b6ad9deb796388ea6bbf39","size":49565,"data":"","first_seen":"2026-03-05T01:01:57.289982Z","last_seen":"2026-03-05T01:18:53.2823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/ui-vendor-C46Mnie0.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/ui-vendor-C46Mnie0.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\netag: \"69a8cb6f-21057\"\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 135255\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40721)","md5":"ebd628d3c364de7bece994b20b810620","sha1":"85c01dddabfd8b948a5e53fc99fc777ee77c2287","sha256":"faaf495248f8d6839db2867fa043be70033035423e269a3c1fbc58b5eb5cf200","sha512":"01cb02487409f506dd717db9043c3906224c2b4914c10db812eb72009cb16d6341d4dc3135d972962e651a7580f00bfe900d1fb89e8dc93dfb5d8d89b16829fe","ssdeep":"3072:d1YFBv8Vo69S8SZIzuqQXuAdXaEW3rHkB/:QFBv8VP9SVPq0zdXaET","tlshash":"cdd32bc972917126d3d785d8846f0640773a19983009c4acb63eeddb6d2240baabbf7d","first_seen":"2026-03-05T01:01:57.282553Z","last_seen":"2026-03-05T01:18:53.267113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/login-bg.png","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /login-bg.png HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/login\r\nCookie: XSRF-TOKEN=b0z6gae3087\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 491285\r\nlast-modified: Thu, 05 Mar 2026 00:16:38 GMT\r\netag: \"69a8cb66-77f15\"\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":491285,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"9cf769dcba4b7b2204f106f1ff1435db","sha1":"665b47473df70c08ba9b5ece401b6a0a78049315","sha256":"fe52209037a57564b0082f0f84bf2b89de9bf8c42444a3aa958ecf880deb0efb","sha512":"6522b1c568357e235032648b330c03e40d41b4373a6ca509583c01d0f09797668b2b158a7e6e47fda20e6284ab03c653a08905370242a80ec5e4040fa094afe8","ssdeep":"12288:NEz2kmjsrwh6e5W+TuAn8oO/83yy7yGdXai88icjiv:WyX4DeUquwOZIj88icU","tlshash":"a2a4235130a4387299644d2f3af529fd3fe838606a4b87ae31df500daa19c51cf9473e","first_seen":"2026-03-05T01:01:57.285032Z","last_seen":"2026-03-05T01:18:53.283136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T01:01:29.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Thu, 05 Mar 2026 01:01:29 GMT\r\netag: \"69a8cb6f-310\"\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\nserver: nginx/1.29.5\r\ncontent-length: 784\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":784,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"847e8cf9b808fc169f066144211f17c9","sha1":"c3c4ae9ecc3a2204bf145ca95eae0434dfe16245","sha256":"ef29e5871fa3c9657966c7a891e09a27b3e117d052eb1fd17b8118f165e48714","sha512":"aea75103205e291a7149ece3b8d4cde45dd671a2680a9cc4a37e7ea3979f50cd228cf7996c5baa60ab368fc6b1eb649ce450e98531c70899eebb004d4e81a15c","ssdeep":"","tlshash":"53014e05b040880bc7301f16bec1e458a986f7498648eda491e7a1bd1844f928f7b479","first_seen":"2026-03-05T01:01:57.286368Z","last_seen":"2026-03-05T01:18:53.269745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":153,"dns":75,"connect":31,"send":0,"wait":32,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/index-2Xl8rse9.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/index-2Xl8rse9.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.29.5\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 516017\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\netag: \"69a8cb6f-7dfb1\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":516017,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52895)","md5":"3f45de248060d03285593f65ff1333e4","sha1":"df22cff7fd12f4f2a668217786b860c6f267644e","sha256":"8a62a313a90a31f341748c204e45c9fdfa8682fbc2b19993eb175f12d4e1d7a9","sha512":"8b2960258f8b56cd8f5d54f948c1c12cd9bdc4134f9dda98f6749cbcc5724edcbd805f53ccefce16fcf9497b744faacd21bf6801916b6b7648e11f89559d568d","ssdeep":"12288:mdYCugh7HB5YhkOEbnyR0hwntUke04AYHUar3CBG:0dIEbyusb4VN+U","tlshash":"d8b47dc87085b669ab7b09e5507f410a753d2e12b40d88a0f138ec7d3ab4586b1b7fed","first_seen":"2026-03-05T01:01:57.288505Z","last_seen":"2026-03-05T01:18:53.279423Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/state-vendor-D3iv93UT.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/state-vendor-D3iv93UT.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/assets/index-2Xl8rse9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 49565\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\netag: \"69a8cb6f-c19d\"\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49514)","md5":"9520087efbf6cc8ba1b78ceccd28f4dc","sha1":"1cf10965a8a095180c6649e1bbdd8570a9ed1da2","sha256":"e51f92c673f227a822c96783d317f007a9787eaca4a21cdb1851ace9dbb48410","sha512":"5a32ba8fc1f4654b56af3899408b5bc654d11be275e46fafe49514747fddfb63a3acf22c172d9448f4dafbd536f9294ce9e5fb17891dd2423f157c686d5eb6ae","ssdeep":"768:lFFRARPwn+sX6N7xJK697RAL+GTNgCQJFA4BjL07IDvpeS/RdHVORECRUcgHlqmL:VGUiU7IL2Oj8LH/e","tlshash":"1023f9d531c2f1336be344a2903f4015f2356d64740d9018b6ad9deb796388ea6bbf39","first_seen":"2026-03-05T01:01:57.289982Z","last_seen":"2026-03-05T01:18:53.2823Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/react-vendor-DtFEaf9-.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/react-vendor-DtFEaf9-.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/assets/index-2Xl8rse9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"69a8cb6f-b962\"\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 47458\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24588)","md5":"ba7202b836b3df03dc70b71f7223fbb7","sha1":"948b86354baa1f8cccf97f31ae02fc7fdc23b08f","sha256":"1e2d6f5a719a7a575054990bd2de73a8a883386aceb09ce3f9a5b5b514af381b","sha512":"072d463c0dcecdde3de8d70e82457b093da4a57afc263beac95dc17d2f9e933584ce715d1822dc4343d217166615545a8c7cf0e1230f9df2c75094aa7ef4ed22","ssdeep":"768:RSRDA/spKS2gD50g63zYYIoNZP8t9Ave+76br1JgIR00yo+7OtZ:svD6zfZNZx971j4","tlshash":"3c2309b97291b0614feb126140bb4056f3b92cf9245d8032b2ace8ae35f4d5c517bfb9","first_seen":"2026-03-05T01:01:57.291732Z","last_seen":"2026-03-05T01:18:53.272326Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/form-vendor--JiFr3Ae.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/form-vendor--JiFr3Ae.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 97494\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\ncontent-type: application/javascript\r\netag: \"69a8cb6f-17cd6\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19905)","md5":"db8b9ed30a783ca32edbb1fe66937103","sha1":"8d18c7890a1763948fba8d86f93047e2df83942f","sha256":"118d3a37badbc508e1a2925a26b7ff046c6d27a5ecef20fc728efa451b3ca07e","sha512":"b114216fbc9eadf6915159c4c6c59e7959fa80abb6508d216bbd8fcb32b831f9881481576db0ef537bef97de57a31625a7801cc83e72b1d570be964aa477d79e","ssdeep":"1536:KKezeF81f6ZECNPzUmCzQPVEK5bwZsZ9d/h5EEQszxwUudRnMb/PUbXycA7Mbx2D:KKezea1f6ZECNPAl8vvzNNwNdR52D","tlshash":"cb931a8670e6ac3a5bf614e520be0209f73a1c143c79d890e67c4ac67a97c55b1b3f1e","first_seen":"2026-03-05T01:01:57.29342Z","last_seen":"2026-03-05T01:18:53.263597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/api/v1/auth/csrf","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /api/v1/auth/csrf HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/dashboard\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\norigin-agent-cluster: ?1\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-request-id: 28xmiz8JsEesNsCgo1RMv\r\nserver: nginx/1.29.5\r\nset-cookie: XSRF-TOKEN=b0z6gae3087; Path=/; SameSite=Lax\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-permitted-cross-domain-policies: none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T00:49:09.385487Z","times_seen":17789936,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/vite.svg","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 1497\r\nlast-modified: Thu, 05 Mar 2026 00:16:38 GMT\r\netag: \"69a8cb66-5d9\"\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-08-08T23:16:54.043057Z","times_seen":6376,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/ui-vendor-C46Mnie0.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/ui-vendor-C46Mnie0.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/assets/index-2Xl8rse9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 135255\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\netag: \"69a8cb6f-21057\"\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: nginx/1.29.5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40721)","md5":"ebd628d3c364de7bece994b20b810620","sha1":"85c01dddabfd8b948a5e53fc99fc777ee77c2287","sha256":"faaf495248f8d6839db2867fa043be70033035423e269a3c1fbc58b5eb5cf200","sha512":"01cb02487409f506dd717db9043c3906224c2b4914c10db812eb72009cb16d6341d4dc3135d972962e651a7580f00bfe900d1fb89e8dc93dfb5d8d89b16829fe","ssdeep":"3072:d1YFBv8Vo69S8SZIzuqQXuAdXaEW3rHkB/:QFBv8VP9SVPq0zdXaET","tlshash":"cdd32bc972917126d3d785d8846f0640773a19983009c4acb63eeddb6d2240baabbf7d","first_seen":"2026-03-05T01:01:57.282553Z","last_seen":"2026-03-05T01:18:53.267113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/index-D3gRdU0m.css","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/index-D3gRdU0m.css HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 122588\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\netag: \"69a8cb6f-1dedc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122588,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"21ee8a11fff93943f7bd993754fa00d0","sha1":"5a70abf0904f85ce780ccd6878ab6640f8ec0443","sha256":"579b5a791fee2aacf76ef3d129b87970c4fc8ad1c7f2b2ce916991c0cfe6079a","sha512":"e5d687c4495cf5d2c23c81521ffd6cfdff6907a1d377bb61c477485b0558cd0197db5aff872b1fa623c4ce5258294649646c1d95bddcb6a6b4e5b4f840ec1625","ssdeep":"1536:umkVE8r9jh+4HhRZEYOQWmTvHuvdcIGUpD:u68r9jh+4HhRBOQWmTvHuvaO5","tlshash":"40c36360f171e67fbc23b4fda3ace41c720ab096dd6297edba65611213c76f61c62900","first_seen":"2026-03-05T01:01:57.295731Z","last_seen":"2026-03-05T01:18:53.281451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/form-vendor--JiFr3Ae.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/form-vendor--JiFr3Ae.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/assets/index-2Xl8rse9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 97494\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\netag: \"69a8cb6f-17cd6\"\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19905)","md5":"db8b9ed30a783ca32edbb1fe66937103","sha1":"8d18c7890a1763948fba8d86f93047e2df83942f","sha256":"118d3a37badbc508e1a2925a26b7ff046c6d27a5ecef20fc728efa451b3ca07e","sha512":"b114216fbc9eadf6915159c4c6c59e7959fa80abb6508d216bbd8fcb32b831f9881481576db0ef537bef97de57a31625a7801cc83e72b1d570be964aa477d79e","ssdeep":"1536:KKezeF81f6ZECNPzUmCzQPVEK5bwZsZ9d/h5EEQszxwUudRnMb/PUbXycA7Mbx2D:KKezea1f6ZECNPAl8vvzNNwNdR52D","tlshash":"cb931a8670e6ac3a5bf614e520be0209f73a1c143c79d890e67c4ac67a97c55b1b3f1e","first_seen":"2026-03-05T01:01:57.29342Z","last_seen":"2026-03-05T01:18:53.263597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/react-vendor-DtFEaf9-.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/react-vendor-DtFEaf9-.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\ncontent-type: application/javascript\r\netag: \"69a8cb6f-b962\"\r\naccept-ranges: bytes\r\nserver: nginx/1.29.5\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 47458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24588)","md5":"ba7202b836b3df03dc70b71f7223fbb7","sha1":"948b86354baa1f8cccf97f31ae02fc7fdc23b08f","sha256":"1e2d6f5a719a7a575054990bd2de73a8a883386aceb09ce3f9a5b5b514af381b","sha512":"072d463c0dcecdde3de8d70e82457b093da4a57afc263beac95dc17d2f9e933584ce715d1822dc4343d217166615545a8c7cf0e1230f9df2c75094aa7ef4ed22","ssdeep":"768:RSRDA/spKS2gD50g63zYYIoNZP8t9Ave+76br1JgIR00yo+7OtZ:svD6zfZNZx971j4","tlshash":"3c2309b97291b0614feb126140bb4056f3b92cf9245d8032b2ace8ae35f4d5c517bfb9","first_seen":"2026-03-05T01:01:57.291732Z","last_seen":"2026-03-05T01:18:53.272326Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/assets/state-vendor-D3iv93UT.js","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /assets/state-vendor-D3iv93UT.js HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pyramidsadmin.legionagency.cloud/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.29.5\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\ncontent-length: 49565\r\nlast-modified: Thu, 05 Mar 2026 00:16:47 GMT\r\netag: \"69a8cb6f-c19d\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49514)","md5":"9520087efbf6cc8ba1b78ceccd28f4dc","sha1":"1cf10965a8a095180c6649e1bbdd8570a9ed1da2","sha256":"e51f92c673f227a822c96783d317f007a9787eaca4a21cdb1851ace9dbb48410","sha512":"5a32ba8fc1f4654b56af3899408b5bc654d11be275e46fafe49514747fddfb63a3acf22c172d9448f4dafbd536f9294ce9e5fb17891dd2423f157c686d5eb6ae","ssdeep":"768:lFFRARPwn+sX6N7xJK697RAL+GTNgCQJFA4BjL07IDvpeS/RdHVORECRUcgHlqmL:VGUiU7IL2Oj8LH/e","tlshash":"1023f9d531c2f1336be344a2903f4015f2356d64740d9018b6ad9deb796388ea6bbf39","first_seen":"2026-03-05T01:01:57.289982Z","last_seen":"2026-03-05T01:18:53.2823Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pyramidsadmin.legionagency.cloud/api/v1/auth/captcha","fqdn":"pyramidsadmin.legionagency.cloud","domain":"legionagency.cloud","tld":"cloud"},"ip":{"addr":"76.13.52.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pyramidsadmin.legionagency.cloud/","date":"2026-03-05T01:01:30.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pyramidsadmin.legionagency.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:54:42 GMT","end":"Tue, 02 Jun 2026 22:54:41 GMT"},"fingerprint":{"sha1":"15:C1:BA:8F:6F:9A:39:3C:37:F7:57:5F:5B:4C:1F:CB:4E:C5:D7:EF","sha256":"71:BC:F3:B2:99:B3:3E:9E:AE:9A:0A:0F:C1:D2:2B:DC:B4:17:B3:F7:AB:AC:87:73:99:CC:AF:81:40:67:FF:57"}}},"request":{"raw":"GET /api/v1/auth/captcha HTTP/1.1\r\nHost: pyramidsadmin.legionagency.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pyramidsadmin.legionagency.cloud/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreferrer-policy: no-referrer\r\norigin-agent-cluster: ?1\r\nx-xss-protection: 0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: same-origin\r\nx-download-options: noopen\r\nx-dns-prefetch-control: off\r\nvary: Origin, Accept-Encoding\r\nserver: nginx/1.29.5\r\nx-request-id: nicT2EavGRJ6W-h4JLj10\r\ncontent-encoding: br\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"336a-13nqFJAjor1MuHwkX+K5g5XNHLQ\"\r\ndate: Thu, 05 Mar 2026 01:01:30 GMT\r\nx-permitted-cross-domain-policies: none\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13162,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17d128abf713e66171f09b0d99e5df71","sha1":"d779ea149023a2bd4cb87c245fe2b98395cd1cb4","sha256":"ffa4c947749e7ae25e80b8db4db2fd92235bd82f818603308d56ac196024829b","sha512":"63a8321e288059fd6aa5d64f4f0bb703c7ba20259ac89f5a0e4ca9973bbbd3d7c65b099efd460285f953845b1ffaa7a484586d316ff295f9477b195580a369f5","ssdeep":"192:HbbCpVVFEmdXnRJd/ab1SlW+Up0k1I99tKX7CadfGYbTQP+ID9CkXxqZ10Kx:HoECRJdiZSlLUee7BGY/T69CMxW10Kx","tlshash":"63423453470f20b35a0c3a97c79b7c19f249f9a16e435ac9e1ca16bcd8afdcd198069c","first_seen":"2026-03-05T01:01:57.296955Z","last_seen":"2026-03-05T01:01:57.296955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}