{"report_id":"acbf730d-6914-4bbd-91da-b311f09b1b89","version":6,"status":"done","tags":[],"date":"2026-05-22T04:07:06Z","url":{"schema":"http","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex/","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"title":"**#Share#**","dom":{"size":8677,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"9be009075f8e0671871d308b76138b0e","sha1":"d107f14f0818e7f6a2111071fdd75e9279f76114","sha256":"8f6f82806192dfc9d3a085300235a7fecc2c809a38be4c4c1017b8d8b6e6181f","sha512":"fa525f8ef8c1f69280c8da9a6e5d8c0f197d96b1e9c969ee218fd3cd31f2133cf9a28229717e553ece25e1b3810824c2a8f15282e681654af5c0283f39f48c64","ssdeep":"192:KWT4jW69DNnwJWarB8YAwTbaupMCgTbNqaqGAjYDHj/BmE8Fewa:K6AncH5YTbNfqGE0jpx","tlshash":"db026c77e4d1390e52b1808a3d17b5442feeaca7e05cac81351c67a32fe4bdb200b58e","dom_hash":"domhasha9bab224345d552f7080e6e8bed914bc","first_seen":"2026-05-22T04:07:08.85903Z","last_seen":"2026-05-22T04:07:08.85903Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex/","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-26T04:07:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-22T04:06:40Z","timestamp":1779422800,"ip_dst":{"addr":"172.66.47.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59734,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-22T04:06:40.969736+0000\",\"flow_id\":658400607257228,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":59734,\"dest_ip\":\"172.66.47.106\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"shporingtfilesasnxmdocsxexaelamdhx.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":946,\"bytes_toclient\":2784,\"start\":\"2026-05-22T04:06:40.901772+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-17T22:41:40.561616Z","alert_count":0,"request_count":2,"received_data":243566,"sent_data":979,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sharepont-share.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-22T04:07:06.790512Z","last_seen":"2026-05-22T04:07:06.790512Z","alert_count":0,"request_count":5,"received_data":407455,"sent_data":2461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","ip":{"addr":"172.66.47.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-21T12:28:53.38571Z","last_seen":"2026-05-21T12:28:53.38571Z","alert_count":3,"request_count":3,"received_data":19641,"sent_data":1534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-21T09:06:51.739466Z","times_seen":19062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96958d3b2ed83dc4d9cfc596c3bce5b0","sha1":"420f1842312fc1feee47d70931ce848b8fb9c206","sha256":"c5b57e6f770150254280bf1db9b5dc692e71f271c39d05e576a5eaae9479d363","sha512":"b7552f055fada2517b8707de0c2df47409af58a2539ad05f062c26b13fdc9a823db5cad70a1867dbbcc1073492f4e41b636bcfb8be52bebce9ee36846fc49722","ssdeep":"","tlshash":"46f0ed8ae9e2124428f3201a4fabb114267322db081dc820bccd9a40bf1c70f616fbd9","size":544,"data":"","first_seen":"2026-05-22T04:07:08.891534Z","last_seen":"2026-05-22T04:07:08.891534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharepont-share.pages.dev/jquery.min.js","fqdn":"sharepont-share.pages.dev","domain":"sharepont-share.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-21T10:15:35.366396Z","times_seen":268036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\nage: 2391836\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-osl6528-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23715\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-21T09:06:51.739466Z","times_seen":19062,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":145,"dns":1,"connect":36,"send":0,"wait":33,"receive":20,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharepont-share.pages.dev/jquery.min.js","fqdn":"sharepont-share.pages.dev","domain":"sharepont-share.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharepont-share.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 20:54:26 GMT","end":"Thu, 16 Jul 2026 20:54:25 GMT"},"fingerprint":{"sha1":"6E:03:69:D2:4A:FE:59:D8:86:F6:5A:8A:91:9F:D7:19:09:8C:20:41","sha256":"11:77:7B:7A:83:81:C6:43:F7:45:F3:92:37:E1:5C:F8:69:7F:D7:3D:9E:68:D9:8B:D9:ED:F9:38:AE:8A:C6:50"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: sharepont-share.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsl8zQt%2BrcaHLamlQdcCL9WkSxB6%2BNHUje6MgP1dn9FvegWl4bmTTAc%2FBpTX2orztQZCX8kLM%2FIJKGfGr3ACKMRWVZit5S8U4buiQieSpcwOnK9Pa4uG1kZXz6kXnA0Acc%2FLvXvtqp08iVkZ\"}]}\r\netag: W/\"0d2f10dc66fa6608db7885d7d7595be7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ff8f31d6cfa32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-21T10:15:35.366396Z","times_seen":268036,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":141,"dns":61,"connect":31,"send":0,"wait":172,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharepont-share.pages.dev/style.css","fqdn":"sharepont-share.pages.dev","domain":"sharepont-share.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharepont-share.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 20:54:26 GMT","end":"Thu, 16 Jul 2026 20:54:25 GMT"},"fingerprint":{"sha1":"6E:03:69:D2:4A:FE:59:D8:86:F6:5A:8A:91:9F:D7:19:09:8C:20:41","sha256":"11:77:7B:7A:83:81:C6:43:F7:45:F3:92:37:E1:5C:F8:69:7F:D7:3D:9E:68:D9:8B:D9:ED:F9:38:AE:8A:C6:50"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: sharepont-share.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPY%2FyNy3EZgxmrV2mpIzxLx0kEL%2By2bTQnjT6QIrqc3biz8S8dQ9%2FRYStN6ergCRP%2B8MfbxyPTmdCQGq29lrVnebUhF5pi%2BtIpDpJuOn6WdZ%2BnsiiytMUukivq5lXILEautaTXflxyC1qs%2F4\"}]}\r\netag: W/\"5d6bc6873732f2047c2ad7cf2a920a10\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ff8f31d5ce232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"197201dce9994eceaf55cc490b76eb94","sha1":"491f3167771a553aa0bfa4ecbe225bf231facdbb","sha256":"f98c197600334c80f063deb7d51e5a1263eb1baa794b2ec185c90e9151d032e3","sha512":"aa7c207dd4e68fb93949bde0c65b543772e946bfd98ce720e6b3319bdc61538070c6e5c266820ac5a6af1847bacc3f3f2676d42b3f843dcc936d74d80ddd8f18","ssdeep":"","tlshash":"f8313a2a0d065109553ff291aff1037ce03581979b83096cbbcd42cb4f797aa816aee5","first_seen":"2023-06-06T06:42:09Z","last_seen":"2026-06-01T12:20:17.80386Z","times_seen":55,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":130,"dns":61,"connect":31,"send":0,"wait":160,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/favicon.ico","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 21:14:21 GMT","end":"Tue, 28 Jul 2026 21:14:20 GMT"},"fingerprint":{"sha1":"E9:66:A1:1A:9C:69:58:71:94:FE:61:B8:39:CB:22:30:F3:75:D3:25","sha256":"4E:8B:CA:3C:B7:CF:CA:36:53:EB:F7:12:2B:4C:82:CC:7D:61:05:D5:1B:48:AA:92:4D:82:45:08:B6:63:7C:E4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: shporingtfilesasnxmdocsxexaelamdhx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cgvzck%2BODaG4CcvnABv3HjqmojYMdhiOf9wELUniWf3Xlmg9AtU6AaNTHFbTm4jK7v%2Bc9JIqNKA%2FMRS1KP5JBSLU7HkXdJaG3CZYCLaWlaXk5gWEobqGBhzxgudGX487Uye%2BtjC7orUwZa85TSMd%2BI%2BxlNPeuc0EkQrCQ3u5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ff8f31fbd1356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T10:30:41.700315Z","times_seen":18011735,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sharepont-share.pages.dev/vid.mp4","fqdn":"sharepont-share.pages.dev","domain":"sharepont-share.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:42.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharepont-share.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 20:54:26 GMT","end":"Thu, 16 Jul 2026 20:54:25 GMT"},"fingerprint":{"sha1":"6E:03:69:D2:4A:FE:59:D8:86:F6:5A:8A:91:9F:D7:19:09:8C:20:41","sha256":"11:77:7B:7A:83:81:C6:43:F7:45:F3:92:37:E1:5C:F8:69:7F:D7:3D:9E:68:D9:8B:D9:ED:F9:38:AE:8A:C6:50"}}},"request":{"raw":"GET /vid.mp4 HTTP/1.1\r\nHost: sharepont-share.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 22 May 2026 04:06:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 18483889\r\naccess-control-allow-origin: *\r\netag: \"b6ae5bd901e31f5a23f067a7025299aa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bz4oo04Y7jDPVRB4FG911j%2BM9m1HVsLe81b7nIkrGDwtMp4hBJOzIhZhrbv3Y62tqhtseEYTmLoKC8MoFEbdTi8Vym9sYdtLnPId4CE00ef7gLH6auQKGj66l5Y7MzjkNdM3zwSeKxRrTbfU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ff8f321bc03b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153384,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2344579bfcf75701553aad4f628e7b05","sha1":"a1abf23bfbbfd9823882a04e80394d11cba14b41","sha256":"fcf921c0c623eec258e3871ddb6d47365d83d2f5d706231c38499ae9f2516b2b","sha512":"3278732bd40b79eb7e6bdc3c4858a34172d246b029ef20f8c435029da6fcb0a45a70f1e0d2c35dcc058a695c141b833843ba787ff7fc93e5f337d0e11c24bc7e","ssdeep":"3072:Rm/4klQ2ixcD2c9SIwwT85zPPxb9gj/CUKdBxFtvc2H3:w/K66cAIwe87b9gj/CUKdBxFtvn","tlshash":"75e3e08db351970beea24330e1e1032ab334f5761b53979f024b6a291cbb3c15b5d9da","first_seen":"2026-05-22T04:07:08.879544Z","last_seen":"2026-05-22T04:07:08.879544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex/","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T04:06:40.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 21:14:21 GMT","end":"Tue, 28 Jul 2026 21:14:20 GMT"},"fingerprint":{"sha1":"E9:66:A1:1A:9C:69:58:71:94:FE:61:B8:39:CB:22:30:F3:75:D3:25","sha256":"4E:8B:CA:3C:B7:CF:CA:36:53:EB:F7:12:2B:4C:82:CC:7D:61:05:D5:1B:48:AA:92:4D:82:45:08:B6:63:7C:E4"}}},"request":{"raw":"GET /ndex/ HTTP/1.1\r\nHost: shporingtfilesasnxmdocsxexaelamdhx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\ncontent-length: 0\r\nlocation: /ndex\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDNteqmqHcwLTvhBtE6KS3GZmRpXOdCSnELKUUOd1MalKg8%2Frq3%2BK3ebAWq0ndcg%2BXwehffvbZCpFnRdD6nhJboVDVFsWQb9wj0ZQkHHxLjaj12Stf0qeSeI4zgbngjxhGCjZ4RLcMtOmd7x8l1o8TITzvujfhAGakZ5pu7xcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ff8f31a4b434e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8780,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6204), with CRLF line terminators","md5":"bc56b920af54c015e18de6a94a45658d","sha1":"6df4dd4c81b4d4ed14c983c21b753b93dbd4daf0","sha256":"10f576bfae239b63bbae8055355ac1487f28d423133ef8468134921addb5649e","sha512":"5cecd42ad5723da449ec7f484720c5774373c85f40ae2a2eeb926c8522f2865dd1a95d39f566f62ec1227aa0e9b26bc93c4a78304e5d5b89516da7602caf3200","ssdeep":"192:KWYI+Wp9DNnwJWarB8YAwTbaupMCgTbNqaqGAjYDHj/BKyNJTp:K7WncH5YTbNfqGE0jpj","tlshash":"bd023a7be481381e52b0909a3817b558afee6c67f04c6881351c26a32ff5b9a611b5cf","first_seen":"2026-05-22T04:07:08.882793Z","last_seen":"2026-05-22T04:07:08.882793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":139,"dns":62,"connect":32,"send":0,"wait":94,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\nage: 2472583\r\nx-served-by: cache-fra-etou8220177-FRA, cache-osl6528-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 25229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163873,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-08-21T05:29:32.099312Z","times_seen":26124,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":146,"dns":1,"connect":31,"send":0,"wait":26,"receive":8,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharepont-share.pages.dev/pnt.png","fqdn":"sharepont-share.pages.dev","domain":"sharepont-share.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharepont-share.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 20:54:26 GMT","end":"Thu, 16 Jul 2026 20:54:25 GMT"},"fingerprint":{"sha1":"6E:03:69:D2:4A:FE:59:D8:86:F6:5A:8A:91:9F:D7:19:09:8C:20:41","sha256":"11:77:7B:7A:83:81:C6:43:F7:45:F3:92:37:E1:5C:F8:69:7F:D7:3D:9E:68:D9:8B:D9:ED:F9:38:AE:8A:C6:50"}}},"request":{"raw":"GET /pnt.png HTTP/1.1\r\nHost: sharepont-share.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 28173\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bc7474df5f519c825324d4d3b0cb36d3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1z4LMuE3irghNrAWGwaZ%2FHut96Q0E3yKAu5dbczCrqUkzDTa7eq0RvKtrpMqe9knRA6qA8vmeVQHCxb1fh7NFCXY7LtuMwQFhbs1NJE5Nre3RCET58qo9kzQvavAax9ioFWc6RNWVYouvxbC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ff8f31d5ce732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 774 x 398, 8-bit/color RGBA, non-interlaced","md5":"c294155a2c1a110a9a4d8380218d2c26","sha1":"4443a531c1deaaa2d2f80103a354c7feeed14185","sha256":"d656eb4dd05511bded9bf7f6ca7a0fb1426c6ae50fa08ba4870bd09e5f72fcf7","sha512":"f1bcb672f7b74d532a8ca7b6f475eefbc85cd61ec169eda2115854d910365ad083936cfbb9ccb3255f7b8b801bf76b4d483f7b5bb4dbc1bcf75fc4aa75cdf7ee","ssdeep":"768:b35reGAwPVpASXKlwqy93EABD2W2ASNV5jZj:9eGA8ViSXu+UayW2Z5Vj","tlshash":"49c2d192cda44e9fc97d35314acb8a91a3b9865725b643063310e1ef7c6bd335d9b4c0","first_seen":"2023-05-09T09:15:14Z","last_seen":"2026-06-01T12:20:17.797859Z","times_seen":163,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":175,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharepont-share.pages.dev/vid.mp4","fqdn":"sharepont-share.pages.dev","domain":"sharepont-share.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","date":"2026-05-22T04:06:41.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharepont-share.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 20:54:26 GMT","end":"Thu, 16 Jul 2026 20:54:25 GMT"},"fingerprint":{"sha1":"6E:03:69:D2:4A:FE:59:D8:86:F6:5A:8A:91:9F:D7:19:09:8C:20:41","sha256":"11:77:7B:7A:83:81:C6:43:F7:45:F3:92:37:E1:5C:F8:69:7F:D7:3D:9E:68:D9:8B:D9:ED:F9:38:AE:8A:C6:50"}}},"request":{"raw":"GET /vid.mp4 HTTP/1.1\r\nHost: sharepont-share.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://shporingtfilesasnxmdocsxexaelamdhx.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 22 May 2026 04:06:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 18483889\r\naccess-control-allow-origin: *\r\netag: \"b6ae5bd901e31f5a23f067a7025299aa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RARigRr7IwDP3wZO3wWRtiEKydgvQOoxEnXUY9zzGu1OaE9Te0bMAq7JXL34pnAFJGf7JOvHPZ6KwJTo0RUglUM6hQS5BRE152hh8DhcsfVxdg3oSnIPF3Z5K7VQU3w%2ByZJIiF6ZAjfjZe%2BN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ff8f31f0abab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131189,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"096d24a2dc3fd971056b4c6586ae1641","sha1":"064eb9236f193a8af392af2ffd9253b88ed9b976","sha256":"bf9114ef7a3c372004e5ab94d236ce2b332a182edb83827fa1cc6bc41861f479","sha512":"e576907134275ed874ff1d89825a23c32250057ba75ee86d2b7f6fa33258da71078c14bfa67a49c25f9b73961aa8f4cae47420941d50f9dfe2d1376ef60c7b3c","ssdeep":"3072:Rm/4klQ2ixcD2c9SIwwT85zPPxb9gj/CUKdBB:w/K66cAIwe87b9gj/CUKdBB","tlshash":"d1d3df8cb351970beea24330e1e6032af334f5751793939f024a66292ceb3c15b5d9ca","first_seen":"2026-05-22T04:07:08.889429Z","last_seen":"2026-05-22T04:07:08.889429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev/ndex","fqdn":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","domain":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T04:06:41.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 21:14:21 GMT","end":"Tue, 28 Jul 2026 21:14:20 GMT"},"fingerprint":{"sha1":"E9:66:A1:1A:9C:69:58:71:94:FE:61:B8:39:CB:22:30:F3:75:D3:25","sha256":"4E:8B:CA:3C:B7:CF:CA:36:53:EB:F7:12:2B:4C:82:CC:7D:61:05:D5:1B:48:AA:92:4D:82:45:08:B6:63:7C:E4"}}},"request":{"raw":"GET /ndex HTTP/1.1\r\nHost: shporingtfilesasnxmdocsxexaelamdhx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:06:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJZL6I2jbVME6Zuqg3TMVjJFUmjtJK0AkdEQ8WX2Yx2KgmhaiIgei84bC4gGC1AKi3RUBOhhca64V0EipI%2FzfUSltYAqebdT1XDzXMB4as94%2F4gr2ir1LSa5p7whL6zZKf0kKc86R5rhMCA7DKGUZVvnEc9QVCDBc8lpBSwcJg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ff8f31aed674e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8780,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6204), with CRLF line terminators","md5":"bc56b920af54c015e18de6a94a45658d","sha1":"6df4dd4c81b4d4ed14c983c21b753b93dbd4daf0","sha256":"10f576bfae239b63bbae8055355ac1487f28d423133ef8468134921addb5649e","sha512":"5cecd42ad5723da449ec7f484720c5774373c85f40ae2a2eeb926c8522f2865dd1a95d39f566f62ec1227aa0e9b26bc93c4a78304e5d5b89516da7602caf3200","ssdeep":"192:KWYI+Wp9DNnwJWarB8YAwTbaupMCgTbNqaqGAjYDHj/BKyNJTp:K7WncH5YTbNfqGE0jpj","tlshash":"bd023a7be481381e52b0909a3817b558afee6c67f04c6881351c26a32ff5b9a611b5cf","first_seen":"2026-05-22T04:07:08.882793Z","last_seen":"2026-05-22T04:07:08.882793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"shporingtfilesasnxmdocsxexaelamdhx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}