{"report_id":"ae51e721-8d8c-4e13-9918-9bc0c40d0551","version":0,"status":"done","tags":[],"date":"2026-06-17T21:03:02Z","url":{"schema":"https","addr":"testtdomain.cfd/","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"testtdomain.cfd/","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"title":"Lovable App","dom":{"size":172701,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48737)","md5":"7f28e9955e092f8f62e31d5ae9475a63","sha1":"8e350248c08edeeab8a581ee9944318c2b228359","sha256":"60c9e84fae7d6f883f49a6ea1b15cdb612f40f440872e12276304aa296eaeed7","sha512":"f4293702913ef60035b8db80a0fe8304ea6808eb6d58d7163e36b6440454a8b5cbfc8686aa70d82e4e25841be7ad136ba54cf838472c62fe31a4f087982ed0db","ssdeep":"3072:Vo95S+F+p+6+Z+w+U+Q+p+s8+M+/+6+5+U+C+dj+j+V+w+S+Z+Q+K+F+B+b+2Csb:V05H40fkplJ0cNmfEl3dCCIpHkJv48KG","tlshash":"f7f3b7b42388032d91038fa5f690b77cd47ad687e94b9c28f27d00a757cadd99d1b6c8","dom_hash":"domhash1dd9a65560dda4e6dc4a640a9a2b0333","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"testtdomain.cfd/","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T21:03:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":1,"received_data":21594,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"testtdomain.cfd","ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-06-17T17:11:17.498012Z","last_seen":"2026-06-17T17:11:17.498012Z","alert_count":8,"request_count":8,"received_data":1794380,"sent_data":4034,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":7,"received_data":315031,"sent_data":4018,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"testtdomain.cfd/","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff2f09c583ababccb51b9bd8bf10337f","sha1":"744043a0ef979c053015bdf383a261032f80ff3d","sha256":"b37305c2245af7bcc3e846a453004ea79b384f6cba8098919ace1711d4befddb","sha512":"9cdd8ab8d1b0b6be26b1530dd077aa311b3974f691704c3e738be356e012a06289a00e8fce2c368fd08b51cdbdbe4e6440a19641212a21a92aa49dfd8d494ecc","ssdeep":"","tlshash":"1501479e6ca3b08622f725a9cbaba259336202173445d401be4dd6502ff884b6857ecd","size":778,"data":"","first_seen":"2026-06-17T17:11:21.794474Z","last_seen":"2026-06-17T21:03:06.060477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/assets/index-BNc1LOth.js","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b2de895c8951af0a807625606d915a8","sha1":"9cc9f7abc8a9dd8c0fc80dd6e360739ff08fe3c7","sha256":"a264c642653b5df2d43dbc803beb8625bde444775b0a14018b9214595c0139e2","sha512":"f882b97cf9bd1588a20fbcfa3e5a025f865ac9eab755f78fca1076ba1e7a3cbe941d3cc64963e2d7e790a5c1b6f0d82100f8fb85c2bc181201b726d0c78c70d6","ssdeep":"12288:eDSN5urkzCnE3MY99P9bEqUwxx2SBL/B71L9tbITzi4eXZT:OtuCnY9Qbwxx2SBL/B71L8E","tlshash":"80e46dc872a6756257e345e1d07f0203b3392906780d8068f13d9def7aa5909a27bfbd","size":680446,"data":"","first_seen":"2026-06-17T17:11:21.782586Z","last_seen":"2026-06-17T21:03:06.05234Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"testtdomain.cfd/assets/silver-bar-sunshine-1-DSxgUOGL.jpg","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.933Z","timestamp":1781730158933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /assets/silver-bar-sunshine-1-DSxgUOGL.jpg HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a28e236-2e6b7\"\r\nexpires: Fri, 17 Jul 2026 17:10:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 13914\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yoYTUBk6lLcTG5hkDGfqiu6ImrA5Ktf4bmhNNhSCw%2BVVOPaUwqD9x%2FO2g%2FfB%2BoMIWnc2RLMkJC0n6WRfK7GjGXl%2F45YOjiOgoPggd2OGuGoSgPLZ%2FVEWtb8kQM9Ug9VGyg%3D\"}]}\r\ncf-ray: a0d4ff155ca1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190135,"size_decoded":183645,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1080x1070, components 3","md5":"f0cf80aff8af8f608e5b94f81292f07e","sha1":"c148e2adb1d8a8cdb29b57ecaa363a1dbf254340","sha256":"074be66415ce23feb16d0c58e9da5130b3c6ed4b391e80de2590ce059859d17e","sha512":"b9d5f0062f6e5038a2496c0bf5f84b20b1ecf52cccf9a7b0524fc789be3281ba22d529de2562da92e7f7d143a5476a71ae097a8de72d3c583224f5cf9fe0e32e","ssdeep":"3072:FdGmhFupxlOAOMg9jPHAQk6BuSnhbm6TZM/qr7+BdXiCpeM7OYKnjMqjM/0E:FdGm+xltfg9/ktSh68LrSBdSCpeemMl5","tlshash":"560412ca5f6158f0cd280b3be5059d4e1227df7cace8d95fa2248db4fb41acad84528d","first_seen":"2026-06-17T17:11:21.788209Z","last_seen":"2026-06-17T21:03:06.050005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/favicon.ico","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:39.083Z","timestamp":1781730159083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:39 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a28e236-4f95\"\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owOgPpjvotJsOlHov%2B2gcZaxHgTXS6A0Ew2eJk4tVbobpM8c8Ox5h2wO%2BOjC4MqW%2BhflVC40Pyi6jpMmncxJ1xcerywMW5SuuMg9Ba%2Fros0a4bjJtaU%2BdfSEGnQ6gI4%2BTVI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a0d4ff164cc3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20373,"size_decoded":21071,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"9f504444f85a5af2eef9264b02ae40be","sha1":"dd15dcde9da684402cd56070688bc4d18d2ebb46","sha256":"dd821076a9b03adc2173c93956226aea3d92482d7578fc4339c5d3a2e9c24586","sha512":"e5dbd729746c77d5ec72483a822c6df608086e5877a1ac146cd3e347a2fcaf50af6c561fc4477923925e9bc9d81b65010e911a40b830a637fddd666972b6651d","ssdeep":"384:zvAOjbCDJfSLloocQmVv1Abb/ttPoGwktQ5nuxFqgrssRi:zoiOJfMoNQmVv1AXbXGZu4","tlshash":"3792d10db18eb66d4ff5819bd0f8e53d42c71aa4b4232282cc8229f15db78dd63d2b59","first_seen":"2025-12-01T00:59:47.52305Z","last_seen":"2026-07-03T05:23:49.661719Z","times_seen":3013,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/assets/index-BNc1LOth.js","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.347Z","timestamp":1781730158347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /assets/index-BNc1LOth.js HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a28e236-a61fe\"\r\nexpires: Thu, 18 Jun 2026 05:10:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 13914\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BEQHxesRe9%2FzbtOUWKiuouPdudnoj3OBw%2FUWVA1bDNonTL4trvR4SX21oc9hIThrgvg%2B1Pua7%2BSQKS3%2BNSNci5xlm4ujvytijgjniXKfzLyhumF979uvW6gZVZHq4sU%2FdI%3D\"}]}\r\ncf-ray: a0d4ff11abf8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680446,"size_decoded":206766,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"6b2de895c8951af0a807625606d915a8","sha1":"9cc9f7abc8a9dd8c0fc80dd6e360739ff08fe3c7","sha256":"a264c642653b5df2d43dbc803beb8625bde444775b0a14018b9214595c0139e2","sha512":"f882b97cf9bd1588a20fbcfa3e5a025f865ac9eab755f78fca1076ba1e7a3cbe941d3cc64963e2d7e790a5c1b6f0d82100f8fb85c2bc181201b726d0c78c70d6","ssdeep":"12288:eDSN5urkzCnE3MY99P9bEqUwxx2SBL/B71L9tbITzi4eXZT:OtuCnY9Qbwxx2SBL/B71L8E","tlshash":"80e46dc872a6756257e345e1d07f0203b3392906780d8068f13d9def7aa5909a27bfbd","first_seen":"2026-06-17T17:11:21.782586Z","last_seen":"2026-06-17T21:03:06.05234Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/assets/index-BQyd0zVY.css","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.352Z","timestamp":1781730158352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /assets/index-BQyd0zVY.css HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a28e236-1070b\"\r\nexpires: Thu, 18 Jun 2026 05:10:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 13914\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wiYMj2GR%2BKfImR6YAPOg%2F1e1AFP2KaUblTBT3VM2FqTsb3PBtd%2FRq1tUvx77VkjcoecrMNpq4ku%2BCM6FPn9aFAkNmrZXwupu69fFbBKU4JTOwJ%2FxU2e%2B3bk1e0SqB7Dglc%3D\"}]}\r\ncf-ray: a0d4ff11bbf9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67339,"size_decoded":13015,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9274a03a276b9eac6713c8b96f90627f","sha1":"03a01cdd00367d5a29304e81e229379421930c9c","sha256":"67e02cf1751d50ba1ba48228f8348bc718caa5d6c56c70bc6548d9d3d083fec4","sha512":"f807c800bfb1069f98b9c3e65b576bf7b23b4ec4dd5555effce30ef2a5f4e8433153190bc84ece843a47e7a95db2f04c41190674004db3b0cc7c48f8963178ca","ssdeep":"1536:/EhHw5BGXekE2UUQuC0aGdV0378VQZkt5FyCWZt:chHw6XekMU5C0aGdV0378VQZkt5FqZt","tlshash":"8f63861ab919617e3c2790e4c3ccb5eca11af0c0de3b05b9be9a41216bd37f519bb518","first_seen":"2026-06-17T17:11:21.785241Z","last_seen":"2026-06-17T21:03:06.053604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.912Z","timestamp":1781730158912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:53:46 GMT\r\nexpires: Fri, 11 Jun 2027 02:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583732\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-07-03T05:18:58.887151Z","times_seen":56729,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":20,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.914Z","timestamp":1781730158914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 587737\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-03T05:11:36.664474Z","times_seen":225355,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":53,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.916Z","timestamp":1781730158916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 587737\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-03T05:11:36.664474Z","times_seen":225355,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":50,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.925Z","timestamp":1781730158925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 587737\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-03T05:11:36.664474Z","times_seen":225355,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":44,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/assets/gold-eagle-half-1-iH7FdMdx.jpg","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.930Z","timestamp":1781730158930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /assets/gold-eagle-half-1-iH7FdMdx.jpg HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a28e236-2174b\"\r\nexpires: Fri, 17 Jul 2026 17:10:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 13914\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aq%2F4PVPn%2BxDPEBnMxPbOJYxedhZfeeoz3jcXhrwbUaU0oMBNJhCdL3qRD%2F9hhUh9RfmRmsgmXpxqiQ3WA3G0ehI4mcpJYNvJVzcyb5HDqesid%2BtUO0iunTYinsa3ho%2FdtoM%3D\"}]}\r\ncf-ray: a0d4ff154c9f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137035,"size_decoded":136870,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 828x828, components 3","md5":"d89330f18e7b594b3a25d9ce097a8586","sha1":"53a2283d302f095f8244dcc617d72c3bf44bc3e3","sha256":"853c526298eac82d797193a15503adaf2e8dc45c2d5eac39a9dae6a8c7561149","sha512":"eb0ad892225397bd37bfae1e7808b12316425e0cb3ea4260d923498c943960f24289f99ac4c2bfd911cca3e5837ecc78315c9f09972f06a8ccaaaa034b86e6fa","ssdeep":"3072:yM+kz/TCY7rKDZvjHM1sz0UcpeArLXJv9xqGGgxBHAgbvX1KT9Z/GbcOTgz:j+kz/TCAKljGU0zJv+dgxF3NM9Z/","tlshash":"74d3129c41a05044dd76c2b0428987e745f2a7f29f4c228b3e1654f6ee7adc60e94faf","first_seen":"2026-06-17T17:11:21.786738Z","last_seen":"2026-06-17T21:03:06.055943Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/assets/gold-kangaroo-1-yzRHv1rF.jpg","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.931Z","timestamp":1781730158931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /assets/gold-kangaroo-1-yzRHv1rF.jpg HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a28e236-69b74\"\r\nexpires: Fri, 17 Jul 2026 17:10:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 13914\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RomVa%2BEAF7LemVCyf2ZQvE2Xiq5FFY3huMymiOowaRtS6A3wWQjBHpCJY1tQAoOVHE4kJwe888wZoexnDFayqpkVvglXJYecU8gxmxnAYqOdzAOQaeD8yq6IUDeD3Chm1As%3D\"}]}\r\ncf-ray: a0d4ff155ca0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":433012,"size_decoded":433522,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1920x1770, components 3","md5":"fb88a5b6c63191753f85e9b07353daab","sha1":"28e63578b652c2e262972bf60ad9dc437e4ed54e","sha256":"c4fdfe8af8753277b6404b87d12be16a30f72a437561339aac57bb42776a067f","sha512":"8a8499631ea227fe606b51c18a6aea789637f9d942473597e14f63aa2b5ed41edcf73349de3b275a6cd1938817bf0c09cf07cd514e6002ffa22ee59ce4001dba","ssdeep":"12288:Bcpjb8+dOVB+PbqCFvn6flDvccjXtohh9CH7/ob:ipjAiPuEvOjdos7gb","tlshash":"ee9423efb27cb5b34a6b131ecd5854e382ab0c4c1b8453469981f713e9ac2a85db3f54","first_seen":"2026-06-17T17:11:21.793021Z","last_seen":"2026-06-17T21:03:06.057197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T21:02:37.949Z","timestamp":1781730157949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84McJlkNty%2Fzz4dnAWAYqm8JmUmH5oDy5FUyfF4yPKjb2suHVJodnXNiHXMUuYgsFOrIYMUnseSHU1kYSU8qcwB2D9GNgKxgpvOJEF0Nl5ktFVZDfjFOd%2B%2Bx%2BbQ0UDrkQJo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0d4ff0fbb8e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":1629,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a587c8b80f98c38c5813b10318036800","sha1":"44803f1d1e91df37bbff80cd1dbcde088ec37b05","sha256":"9706f14726f709295da9ac1a70309c9749e52e5ca2f417bd0a137854e029066f","sha512":"38fea65de499f2e58c0f55644cbf6ca8ab367ea7ff14108238c5cda5d7d5bd35c44e8cb1325e51135dca97167ea0b9a1c5cd8b8cc13c278676e09412238a2c10","ssdeep":"","tlshash":"4a4153ab4c91e80422b1c2388ec7f1085a3292179248ec95badd959f1fd1fc6c4d7d7c","first_seen":"2026-06-17T17:11:21.790096Z","last_seen":"2026-06-17T21:03:06.058159Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":62,"connect":16,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:ital,wght@0,400;0,500;0,600;0,700;1,400\u0026family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.619Z","timestamp":1781730158619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Playfair+Display:ital,wght@0,400;0,500;0,600;0,700;1,400\u0026family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Jun 2026 21:02:38 GMT\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20910,"size_decoded":1729,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"909fc885f20db5eea82ff61821c3b1c4","sha1":"10fad94f3b1ecf9a89ba111f1141aae8fab23120","sha256":"fb0058722b3704981b329b22270fe62c3914cbef74105f456dc99f79f3d9c927","sha512":"87ef3c3ccb32bdad38999f0c420145d29e9f2c6ee5d68a0f7b56f4445a56a5a6905ffab348039f02b2dc6c23a3d7c254028005c022b68b46df700d73a1b25b10","ssdeep":"384:8KYXuM0p2+wJ129lM129q129m1299L2R/W2v/2bv26S2R/P2vG2b226F2R/Y2v5S:aaAawacapaOw/0veaHwG02xaww50pAaT","tlshash":"9f92a9a2006ba500ab831dc223cf7f36ae9e60946085d27d6ffd1dc95cdbd66836871d","first_seen":"2025-09-16T22:45:35.359105Z","last_seen":"2026-07-02T20:02:54.452884Z","times_seen":34,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":9,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.918Z","timestamp":1781730158918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:53:46 GMT\r\nexpires: Fri, 11 Jun 2027 02:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583732\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-07-03T05:18:58.887151Z","times_seen":56729,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":30,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.920Z","timestamp":1781730158920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:53:46 GMT\r\nexpires: Fri, 11 Jun 2027 02:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583732\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-07-03T05:18:58.887151Z","times_seen":56729,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":24,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testtdomain.cfd/assets/hero-gold-texture-BG7DH7zd.jpg","fqdn":"testtdomain.cfd","domain":"testtdomain.cfd","tld":"cfd"},"ip":{"addr":"104.21.41.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.865Z","timestamp":1781730158865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testtdomain.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 03:15:38 GMT","end":"Tue, 08 Sep 2026 04:14:01 GMT"},"fingerprint":{"sha1":"48:CA:BB:4F:54:D9:C8:35:3F:DA:09:E9:07:F5:55:BD:B3:73:0F:15","sha256":"55:2D:B4:27:E0:05:3D:00:52:44:29:9B:D2:25:9C:B4:9A:2D:24:55:38:DB:18:3E:53:20:9D:15:11:CE:42:C2"}}},"request":{"raw":"GET /assets/hero-gold-texture-BG7DH7zd.jpg HTTP/1.1\r\nHost: testtdomain.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testtdomain.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:02:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Jun 2026 04:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a28e236-3efd9\"\r\nexpires: Fri, 17 Jul 2026 17:10:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 13914\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ud6azvULtqFjRXD6Y1JZ1PSdn4Ube7Ig0NpL3khKQIAJBWmruNcuP3NiTHbrq7OJkKgKylD0wsk5BOH0urUnX1lbrELS5U%2BTm9%2Fq39XFVoWhO%2BH56ckJhdMAnHGnn30ucXs%3D\"}]}\r\ncf-ray: a0d4ff14ec8e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258009,"size_decoded":252670,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"5c3783b994ffa8c0c890569e87c343ff","sha1":"546223504048493b9e3bf3d145360a9a0cb02dbb","sha256":"b4c6fa5fa5a9f435cf4733c6af85990a998c9e2b0241c1d9714a6dffb067c866","sha512":"436f48aa4d6d31c7c3994e70d6f16397ad386716e23c4939a78ca6134d0c6e4c13570d7c4abde983c5201d80c70b5817e044e42f9f1acadf2872c8c06f0773ae","ssdeep":"6144:+Dysh3fCXYpxU5B4zo2cV9Ch5JDDSAtwq2QOrNuA:+2stfCXIxU3sorVKDbtwTtr4A","tlshash":"024423331d312272115a1eb5ee6fcd55e42f0b1c0898679729b2af67bc71e210d4af39","first_seen":"2026-06-17T17:11:21.791422Z","last_seen":"2026-06-17T21:03:06.059578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"testtdomain.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testtdomain.cfd/","date":"2026-06-17T21:02:38.922Z","timestamp":1781730158922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testtdomain.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 587737\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-03T05:11:36.664474Z","times_seen":225355,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":37,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}