{"report_id":"af148eff-7019-4497-b1c1-be77ab918cda","version":0,"status":"done","tags":[],"date":"2026-09-22T09:58:47Z","url":{"schema":"http","addr":"syn-thalora.live/","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"syn-thalora.live/","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"title":"SynThalora | AI-Powered Trading Platform","dom":{"size":100262,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14991)","md5":"93751a62f5574cc4d6ebb2877b3c3f72","sha1":"c9591f7b6f0093e95dd12ca8182dee51dc0b9fdc","sha256":"a44ae77d24214933230c6262306c396ea71862303a86cf722c9d21f75a0e5591","sha512":"371cecc3bd508cf699f51433832d48f99d9dfedc798be9dd8041417f24378dfc8ad1306b1d265ba32583785fb673785987ef6b9fb022f90b6506602ea997871b","ssdeep":"1536:heLd3MgOuqioI575PfnWgLxs5TNKI7OPBtnpLwrsN/iD:heB3MgOk5zxATNK8OBwIN/o","tlshash":"31a3733241f16927013782d031a54b3ae9d2da0bee8e06447f9d4bea9ffbc916c1b15d","dom_hash":"domhash3e25f31323b6315d7cc73ce8dc57d16e","first_seen":"2026-09-22T09:58:52.472833Z","last_seen":"2026-09-22T09:58:52.472833Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"syn-thalora.live/","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T09:58:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"syn-thalora.live","ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":100,"request_count":20,"received_data":792829,"sent_data":11678,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":4,"received_data":382549,"sent_data":2212,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":7500,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnedge.io","ip":{"addr":"104.21.51.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-23","domain_rank":0,"first_seen":"2026-07-24T10:06:41.368803Z","last_seen":"2026-09-17T18:46:20.721315Z","alert_count":0,"request_count":4,"received_data":4359,"sent_data":2052,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":4,"received_data":112192,"sent_data":2276,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"syn-thalora.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-22T11:47:59.196583Z","times_seen":437549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-22T09:58:52.485564Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/validation.js?v=1789999970","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ec1d1f258caf6c5a8f9762294e01299","sha1":"e72ebb394a27cf7cadf9f6322960387a4d31de5f","sha256":"5721b6d29b5e8a25160297afb68994d48e86dfb3027437bbcdef84cc870de708","sha512":"3edfb09ac32128747a38813687742a400bb3acaae269a7de4277942f8cfa5b04c30eba3644d0491b0d73633abb62c65bec04df5286121f25019436b3d46f1da2","ssdeep":"192:jYo+VLJWHMSJ9g5FS7FNCXTVGkJ6FWJH6MQpf88ehnfWrfdugF7FThOUVobvFnqa:5gHCUXTrJ6FWJHE88eJ2duW79o9RnWup","tlshash":"8612a6a831f2242010775af636cf6046729990272c8ac49976ec87453fc6ae5d7f3bdc","size":9687,"data":"","first_seen":"2026-08-17T21:05:08.038384Z","last_seen":"2026-09-22T09:58:52.501643Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/js/main.js","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ced5fe8b0abea27bc15232482fdb11b","sha1":"3093b4e51f5206fb2950dce8538b917c329a7e52","sha256":"5db8505b600a0a43f1fe1731270846ef9d919dc2733db0455db3c6d150a090d1","sha512":"ffb5f2a14dac962cc076b971e50cc82cf3656b2c56121977b6c413d54aa8b4b82ec912a4bf9a89a4f897c90b429eadd14c1e4e6d2a6852cfc209e5ca077504ce","ssdeep":"","tlshash":"5951433871b53437007751f997c3a286b624204fb243d8ae75ac8a8d2fc682529f79f8","size":2990,"data":"","first_seen":"2026-08-05T09:58:31.582724Z","last_seen":"2026-09-22T09:58:52.506781Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnedge.io/js/e731f366633cb9d49805b652667b1062/app.min.js","fqdn":"cdnedge.io","domain":"cdnedge.io","tld":"io"},"ip":{"addr":"104.21.51.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"431b27468a06ab25560ef65d75f7b9dd","sha1":"f75908f38b95a60f09785567443de70a10cce756","sha256":"695ba775b99028f3eb853ed45faf1578c638f53b2264258f0a11ce76f89b28e2","sha512":"c42da6c91436bee0cc9e5fd4b2d08d6d33ba0b4ad07714dda4eb4b39fb8733093069d4d325fe708ae799d238eb3f824c7f472fbc51aa42a463ebe670694fd199","ssdeep":"","tlshash":"a111543971917a916bba70b9123f480b50af3b13dbc840e9646e88c41a7554cab33e9e","size":1005,"data":"","first_seen":"2026-08-19T04:07:09.181405Z","last_seen":"2026-09-22T09:58:52.508293Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-22T09:58:52.482307Z","times_seen":2468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d663258566597349d4967b83ef66013b","sha1":"9852b13c0caeb2b3b0bdf0481f3beea9b7e60376","sha256":"4d00e54dea0381f9267e9c3cf98a4cef9d25e373f1909845bfaf0953f9aa3295","sha512":"79cbc79b9da58b78f65c248dfbd6e377a420a8f604f2acd6576be8f4a7da20a54469ad35231220fe334bbd00c26bf6231a53e97de1eb0314661c9018d3af176e","ssdeep":"","tlshash":"dd41504880b62836403b62ecafcf660963662443780aec5cbf6d8f082f8591547f65e9","size":2294,"data":"","first_seen":"2026-09-22T09:49:29.872281Z","last_seen":"2026-09-22T09:58:52.509073Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.321Z","timestamp":1790071089321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://syn-thalora.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:11:52 GMT\r\nexpires: Tue, 21 Sep 2027 16:11:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 63977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-22T11:14:08.613544Z","times_seen":25167,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/visitor-geo.php","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.359Z","timestamp":1790071089359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /integration/visitor-geo.php HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://syn-thalora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: private, no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: CF-IPCountry\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfeWpg7yPyoVwQbwIo3qGl6FHxpdmfuUBx2QxkYZOgPIbDHMr%2FBxDVyh%2Bmarp44ipKP0ITgkHiYJb2xba7Li5KIMv7%2F9vh4uqhrotnv%2FoUbub69l20492BZZraiT%2BnAPB7bB\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f073148a7a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":870,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f59b16065db96de1ddeb6c9daee7be2","sha1":"378addcdb7a47dfd54ade9cd4992b4c22de9613a","sha256":"b058ca4ffe85a71070a7d24626f46e61f7e63aed40fd597acea90ce23aa6f670","sha512":"e369e9b2b1063ae72b138842ef40e54138a145a8f08903236cb595d32a94e598fa37ad24371057bacbd3e57bef0e67bb290f9e5dc75dd6b112ca0653d65f082d","ssdeep":"","tlshash":"6fd05e0a1b0e8a3ccbe907c265ab2d5908cf3130150ba872ae84dc640e1077020d92cb","first_seen":"2026-09-17T18:46:24.265582Z","last_seen":"2026-09-22T09:58:52.476218Z","times_seen":3,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/paypal.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.438Z","timestamp":1790071089438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/paypal.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87nlVV5lynkf%2BEggxxUtDSzl9umnBR1yJS2ImEJFERCtTNG0kDcGqkxZ2Ca7Bq9JmZGL4bPbKwIwx28uqU3E9lIPIA5%2FmFmqaDfrOqs7%2FfMKUKf0lvq%2FSZoBlBJx0fvk5%2BZJ\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-1d3\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073150a8a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":1017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05d72eb0f6c434b7a2028b8c9ba21aa7","sha1":"b2ba57ceec752c5f923b85f145837d4908f9128e","sha256":"d345a682c6591cf87eb90e2057da68b4b639b06205e7912bfd6085aa1f0050d9","sha512":"bebea642a6d05d44f0b29a0c596cc637ec6f40b1c716694972b3247836ac796c7449f18809b4f19e942fa1ca5fb73c62689cfc6edd7a5d02885f1b2e59655b79","ssdeep":"","tlshash":"0cf0dcf99af40945c2dd4e955fb0fcdc922d817e60e90159c4e6430815a89b9be8de34","first_seen":"2025-11-23T13:00:43.866478Z","last_seen":"2026-09-22T09:58:52.477288Z","times_seen":15,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/googlepay.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.440Z","timestamp":1790071089440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/googlepay.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyqv44o6kh7ZcrXW7c%2BB3Bdyz%2Bc%2BXhhIsWQoEjSxoPvNIis88fM9cPrychbIUO5eIGUceAujlb4GJyfFE8u2LJ9HIqdMVdJTiAtVz%2FeIHJ3aFfGGxa2WsSRyobsT10kbSUgF\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-596\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073150a8d56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":1455,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39c17849140c79ac8812f509b6267559","sha1":"5d9a8a7e30275b25dd907fc5d179c1c8c488f3a1","sha256":"d0614f4fa8974370b52e47656adc9fbbdca1249cf9190869d76644509b525ba4","sha512":"73b68c5ed4054cf031d040fcf36e391f51b28b8535ae79db275ccf487d1c62e3e82fb7e3180284ee2e14cd20a5c87b52cf2baf2cd8d86dff43879a269f9cbcf2","ssdeep":"","tlshash":"f2211dcb2b60e9ece58e8c8aef582401802fa4f9f6ba54c0e1434f198487cc4f91ad40","first_seen":"2025-11-24T05:06:10.557483Z","last_seen":"2026-09-22T09:58:52.478202Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/banktransfer.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.442Z","timestamp":1790071089442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/banktransfer.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dY75wAuxGIsXldUJjP4idQ%2FanFVSGaO66LUU%2FNZeSMRvEobzfLlNjfeTrBqEsaaZUcVD8Tk1cB4PM9KILvzowEWy28E8AlLdwNCfZ2YwNlyks%2FPb6OB%2FJrdG9SCjFIhbWYUO\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-79f\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073150a8e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1951,"size_decoded":1712,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133810f2a09212990a64ae63d91095e1","sha1":"ffadb5e602a05b94dcbfb143d81f91b3b0dcbdc3","sha256":"c0e70cd4d36f4087b60c0760b7d361db1cab511de75d9f21e6d6d23afb6dbaf6","sha512":"0ec0f7c6ae538b1d409369d2e7dc4397489c239c89a41d3da1edd17aa29636e2c7fdfb7c7cd10ae1d5e4993bb34bba4d59750ed3d226234207e3a46cc6163acc","ssdeep":"","tlshash":"064154c552b487ccd885e51d9f72edc8130e90a9f965a9c54d9fcb1d254f9c0fa0a844","first_seen":"2026-07-17T11:43:45.668695Z","last_seen":"2026-09-22T09:58:52.478882Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/ssl-secured.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.443Z","timestamp":1790071089443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/ssl-secured.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vy%2Fnp3hYCzLWFBJYtGWO1E4twnJxQiw5sp%2FDMwQtyJHA%2F8eqjprMvMQZpSV3O%2BfIeGc6bhMn3xxe4DFN4Ini9PL8hQvLN4nF9HttuFfS3AvSmyMQYSjMVmiHXz7%2FSJM%2Bgbjd\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-174\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073150a8f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":956,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6eb528665a470268942e272042313ef","sha1":"dad2a54379493a1d57316f00590c05006ac85248","sha256":"f490ee6f0bef7d308a70aac04bf0b3c3436d8cc4de70666f244604ee7b61e871","sha512":"755c8dc245014c03e51119749fd50231b7fefc15ac55715ea71c8bdd181e45378435e08166f9a8009f5f277369e341ed8b2d39e4264fe462b7ca81253c633924","ssdeep":"","tlshash":"b5e0d827a2685c2cfa244600a77871b461fe51dbe38c0225e89529a5682156eb8ffacc","first_seen":"2026-08-19T04:07:09.16693Z","last_seen":"2026-09-22T09:58:52.479802Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.889Z","timestamp":1790071088889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 24 Sep 2026 09:58:08 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FF6vrSp7gldCqDlALhGwXFjF%2Bj3BwIyaX9UlOdujHvhUaUzoCBwKGwPmYR75fGsPdKqZvjxqlT6BJjuWNZZ5VEE6hl%2F4TIqDQHpopD4qt%2F8CUVtASgGZodB%2Bp3hOVPjdWyZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\nserver: cloudflare\r\ncf-ray: a3f073119a2456a9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-22T11:47:59.196583Z","times_seen":437549,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/visitor-geo.php","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.361Z","timestamp":1790071089361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /integration/visitor-geo.php HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://syn-thalora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: private, no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: CF-IPCountry\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jv06vx%2Fb%2B%2FR7CzilZCEL8SQPwiBIJ8GjEPwfNUJCD0N4XB%2F0olapu%2B6WSgy1KHDIYTWjI5Uz2jbhImJzDSdfTcLEOqjgxiTEFS%2Bq7Z4rBoqyfWWt7plPDOHWSw%2BjULEFePe9\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f073148a7e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":874,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f59b16065db96de1ddeb6c9daee7be2","sha1":"378addcdb7a47dfd54ade9cd4992b4c22de9613a","sha256":"b058ca4ffe85a71070a7d24626f46e61f7e63aed40fd597acea90ce23aa6f670","sha512":"e369e9b2b1063ae72b138842ef40e54138a145a8f08903236cb595d32a94e598fa37ad24371057bacbd3e57bef0e67bb290f9e5dc75dd6b112ca0653d65f082d","ssdeep":"","tlshash":"6fd05e0a1b0e8a3ccbe907c265ab2d5908cf3130150ba872ae84dc640e1077020d92cb","first_seen":"2026-09-17T18:46:24.265582Z","last_seen":"2026-09-22T09:58:52.476218Z","times_seen":3,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/mastercard.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.436Z","timestamp":1790071089436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/mastercard.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhcKlODJ2HI1Q3iRYQ7SyzHBpO%2B%2FcmcABN3zGUTXAqWPlBJt6G1tSnI2SbBI%2FfjmPy8WVO2iF3KMLCxW8iu2DO%2BwU3RzE0iRyjJWXVAqfDnR5gtkeghZE%2BtlwCkJvMGGkcWc\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-361\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f07314fa8956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":865,"size_decoded":1155,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"420ca004c1cc031de3e651706b8e9551","sha1":"40b4c7e1223b5ed7841c311c83fa470e53cdc57d","sha256":"de700f189a1f157df6611c4d30df55af602a093af364a4b667c17999e6e070db","sha512":"c9efb537011588771eecef1ec79e5b82da707682ad3ce5d2402e757d6abef8dd81cfb2a0fecc867a82f8480b6fe4966fca45f91e90aa09e65ab786417dc2cac6","ssdeep":"","tlshash":"ed1116db8730d6d28bc28a4afb19d454915e05ff3f4191d5d0c58bec1487f10b71aa5c","first_seen":"2025-11-24T05:06:10.547299Z","last_seen":"2026-09-22T09:58:52.481472Z","times_seen":31,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.480Z","timestamp":1790071089480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://syn-thalora.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\nage: 614036\r\nx-served-by: cache-fra-etou8220128-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":62699,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-22T09:58:52.482307Z","times_seen":2468,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/logo.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.544Z","timestamp":1790071089544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/logo.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhGRZzOBigoiPo0MwSeq75TMVRm70%2FZzI9DipJKhxU5ZLUL%2FYEmEccO8l6Scnavmjda2LMBZ5k6zFXcItQrWwoK14YDDB0pvT1VPcMp4uWAKJ8eGLOGi%2FUmbdXpsnfVaM%2BPE\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-15d\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f07315aaa056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349,"size_decoded":879,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a637e3302f4de7848a88fd78377a49bb","sha1":"3e6710c4eb66992e370f94b258d1c1f3a17ca104","sha256":"7615356af59cc5c78748d486382a538ea1763386c6dd109b1c03f237d00024a1","sha512":"151d629430b6399e325ed32b65f57cff536835f1ee9e60b47f9ab3e758be242ff108acf66898fae6a6b9d583f11b45b9b9ed580a622974d469c26aa8fec40410","ssdeep":"","tlshash":"0be02669936c4c3cf7220518db3c717460bb92c383582314d86026705c1824fbcbf6ed","first_seen":"2026-08-05T09:58:31.606441Z","last_seen":"2026-09-22T09:58:52.482929Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/default-integration.css?v=1789999970","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.882Z","timestamp":1790071088882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /integration/default-integration.css?v=1789999970 HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heuWPpb%2FoXkTD6pdSkv7Xw0%2F8RdiUFCqgkks5WGiYtxGfgNLeYKlB1msC1SXM%2BF455HO4wXm8e4m4FM4ePKRwOkie5%2B%2BK%2Bu4%2FG%2FDYmEHf63Clty%2FCdzqlOucrVpltIuhK9he\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-66c\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073118a2256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1644,"size_decoded":1385,"mime_type":"text/css","magic":"ASCII text","md5":"f6b6754d5cdc13a480cb9b7ffafa0359","sha1":"12c48cb96f58fc83b5dc52a8ba30e1429476bf88","sha256":"4eead3bd17d790cda51df359f4cd3fb4b5a2bf788e05c65848651f33ec895366","sha512":"6ca001a6a78330f0fad7d55f2a9449951e7e7206d5ebb8154e048caa1e6ca270c3acf44de335801659ae0c7013d08e903adc86f1531dae8fb5c881350b3a7adf","ssdeep":"","tlshash":"0531126ed4a94b00fc5ec26838a2ebd6379f5100780ec27d87e1288cc9cd14ab4f5f89","first_seen":"2026-08-17T21:05:08.02403Z","last_seen":"2026-09-22T09:58:52.483627Z","times_seen":5,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.890Z","timestamp":1790071088890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11469\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\nage: 1037585\r\nx-served-by: cache-fra-etou8220042-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":12245,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-22T09:58:52.485564Z","times_seen":514,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":12,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/visa.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.434Z","timestamp":1790071089434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/visa.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFIV3G9UECxN%2BnJ%2FEdazGC4wYel2%2B3Yh7rUmaGh32%2Fc8anIw3HMB1vDzLi8mdbuEHFxvITwwejY8nTN5Hf3jIknEs5t8ezS7d9lmx%2FDVBA3ynD4lqh2Kx7xMDSDcfFDaaTwd\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-328\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f07314fa8856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":1190,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"275a1bd3c649727f92401293229a7a92","sha1":"b2f6016461022ff20b74c29a97f5d76c3a2587cf","sha256":"e18ab17c449a0756e5a834f1f7da51197622e88b3aa1593f562462e3a49cbf2c","sha512":"3a6bf2a57a480cc6c621a1187b91c3c87cdf0486d8fcfac3050020c35825936f6418b854609de79aa83caa0a9f31aeb6c05cfa8ae4910fc419237e66db2be452","ssdeep":"","tlshash":"650125d31a5405da6ecdcd5d6fb87e29787f70ba7cf2041dd4420b0e9157d96e411a00","first_seen":"2025-11-24T05:06:10.538881Z","last_seen":"2026-09-22T09:58:52.486806Z","times_seen":29,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.878Z","timestamp":1790071088878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 09:58:08 GMT\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6816,"size_decoded":1313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1192235fce50de6b1862e00e3eb4e5b","sha1":"1acc08e2711f780af3a52a52e820282f8cde8a81","sha256":"7ea10d6b629da25ecda50bce71d3cfdcdd586f2a8c65018ac741b637050c1cf8","sha512":"0777d00a666c459828c22a4df1d3d645f8015271ce5056a67e888e1704184498607dde6d23e5d94e98b25b3c7b91cc37b0b813256b39ad3bba4ac2c722fd7bca","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMC:ACFJRSdCmaRBUCj3Ro7CcQRvd","tlshash":"83e1a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0854dc7ec2a7375b1c","first_seen":"2025-09-12T03:43:28.128552Z","last_seen":"2026-09-22T09:58:52.487812Z","times_seen":895,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnedge.io/c/e731f366633cb9d49805b652667b1062/theme.css","fqdn":"cdnedge.io","domain":"cdnedge.io","tld":"io"},"ip":{"addr":"104.21.51.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.887Z","timestamp":1790071088887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnedge.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:57:32 GMT","end":"Sat, 19 Dec 2026 13:56:20 GMT"},"fingerprint":{"sha1":"51:E5:04:ED:EE:CC:D4:F3:66:8A:F9:FA:AB:3D:18:B2:CD:E4:DC:5D","sha256":"64:2D:EA:0D:23:42:9F:4B:C6:6A:B6:BA:18:66:D4:DB:E2:3F:DD:91:94:DA:40:59:FF:EB:B5:54:F7:E7:96:6B"}}},"request":{"raw":"GET /c/e731f366633cb9d49805b652667b1062/theme.css HTTP/1.1\r\nHost: cdnedge.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Host\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 22 Sep 2026 09:58:09 GMT\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zk3qSMUNPDWVtOzJJgyMEyzb83OoDZ39JVh1YBHcRIAfMTAfywFtn7mpuGmCz5FMjVLEVcXXlbFFXqgHWpNBhNNnuE4EG7%2FGOygGhb8wbIt0VjarX0lJx6A6WXyl\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f0731229bd0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44,"size_decoded":884,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"07ce9e18706833101c3e42de2fa453c0","sha1":"350fabc5cccf09d063321031e048c0020bca9aee","sha256":"33e5f505ae9ff3cdbbb0b8090672cd1885c30c3f98ffa9ca67447b40ee54d591","sha512":"4c984d6bd043b651671e01315b8b93409c4985370432c13e20221d594cfd8ce7fdafdbe517b03d1db627b83b73b1e93a3c6e524e91a77b4dd0e83aadd891bcdf","ssdeep":"","tlshash":"739004341001d711474f45071c00d314c3555575d4d03fd4d00014d00d3405755c1f05","first_seen":"2026-08-19T04:07:09.16294Z","last_seen":"2026-09-22T09:58:52.488867Z","times_seen":6,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":83,"connect":14,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.317Z","timestamp":1790071089317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://syn-thalora.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:11:52 GMT\r\nexpires: Tue, 21 Sep 2027 16:11:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 63977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-22T11:14:08.613544Z","times_seen":25167,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T09:58:08.101Z","timestamp":1790071088101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: CF-IPCountry, accept-encoding\r\nset-cookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; path=/\nsynthalora_keitaro_subid=18uumd0.1bb.igl07; expires=Thu, 22 Oct 2026 09:58:08 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPkhhFXJ5Uhtq6ejT8lsMfbfEb%2Fhb6r3RHihVe2B0%2FiBbks%2BtfgJZFzgo236GLM8M3HJ2ujL26hUTV8anPd2SBrecRdBTsY%2FL0ikcr21pWjUWCjch4Q%2F3JdzOJBi%2FWqaPHUm\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f0730dc902b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"adl9ui3jb2q5p5c1g3vrdhn7a3","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; path=/"},{"name":"synthalora_keitaro_subid","value":"18uumd0.1bb.igl07","quoted":false,"path":"/","expires":"2026-10-22T09:58:08Z","raw_expires":"Thu, 22 Oct 2026 09:58:08 GMT","max_age":2592000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"synthalora_keitaro_subid=18uumd0.1bb.igl07; expires=Thu, 22 Oct 2026 09:58:08 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":84328,"size_decoded":13423,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1233)","md5":"a413d4be5759ee5c4185c2fc97768774","sha1":"59728a93ed2acf2dedc0bc4318704b03ea32267e","sha256":"4063204c31d0a9ec93387c8dc490f35e3befe31dce26384ca227635bdf277dff","sha512":"c74216ab424bb7f9c3f06a65c4b718e2054219f82f08001130feff040b1398f9209cdc97cfef07acd881575149dc5e93f2bf824627fac78ea9789e8ece369d36","ssdeep":"768:8l+eLd3MgOoUqg1fqDI7z3jj5JzTDFWK1IzH9H8SZN/PKu:xeLd3MgOuqiDI7zTjnTDMKezdcAN/iu","tlshash":"7a83726051f24afb419f41e53eb14b0a2a92d113de4d118cbbad0bd89fbbca59c1739c","first_seen":"2026-09-22T09:58:52.489565Z","last_seen":"2026-09-22T09:58:52.489565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":138,"connect":3,"send":0,"wait":289,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.331Z","timestamp":1790071089331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\nage: 374011\r\nx-served-by: cache-fra-etou8220095-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":71051,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-09-22T09:58:52.49458Z","times_seen":6880,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/form-token.php","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.360Z","timestamp":1790071089360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /integration/form-token.php HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://syn-thalora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apokO0eP7o25IvjqmJpaOHOMVPTQBT42pexUCyeEcqhrnMSloB5UTZfe7FM2ULpwvJZ9zukciR9rhBoAC5zZL%2FGPBuU7sASN2%2BiDPhEfnffemMr6N5YUKlkkKm8cl8Qs2kYP\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f073148a7c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":747,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1bb311a00662fecd3fac37d030cb21cb","sha1":"8db8280eb4218a3e9760908c584e9b1b8235a122","sha256":"3ec084a68de24a5ed8d434f0a69f65d7c4d77705cdba275a47246342af20f069","sha512":"682d760a05910c6d1bf72333aac043c92ded1e729c9793e789d5f73eaec69df87b8cc66eea4d5c654a5a899afd7ef7f6ae349b274fc36e65626f876375744fd7","ssdeep":"","tlshash":"eac08c18e0783a2043d406acd28f696687bb6021128e98b05528688c7daa40a1a4980b","first_seen":"2026-09-22T09:58:52.497151Z","last_seen":"2026-09-22T09:58:52.497151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/form-token.php","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.362Z","timestamp":1790071089362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /integration/form-token.php HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://syn-thalora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVWauzChnRDqJgnGoHYmmj2vrqj2pzSps8QISgwpWEHM9gVvuF74qOufW%2BnUkF6Ri5zAuVRUh6unUKBN%2FDCVfHVekiZ2QRAThzVXl1NFWiafO86UyGuwCWegK4lm%2BCGJ3RCY\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f073148a7f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":749,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"388f6ab20184402a7079918c5de0c128","sha1":"d29d4b5b8cacdfefe052e541ed9cb021e5111c28","sha256":"4ea322f290c39430766a6e607ba5dc9795691a25a0fc7c0b3fec8f9e1b770d49","sha512":"6aca416fa1f70a6c13f21c6b4749c3e5d0aae53fc3c6f35f4a4452e0c2ea8626cebc91c23c0542b5fa09fbf3ec50a148cc99d6adcc8daecfa2b751680e89b579","ssdeep":"","tlshash":"bbc02b14c5b41f61c39229785eeed42202adec3d010988e8f19f760621b3476d74588f","first_seen":"2026-09-22T09:58:52.498969Z","last_seen":"2026-09-22T09:58:52.498969Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/css/main.css?v=1789999970","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.880Z","timestamp":1790071088880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/css/main.css?v=1789999970 HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ad5whrPsR%2F7etGLTPquuy%2B9uQ4kvBWP%2FITXSSzUwM%2FWrTT8%2BEFTxty0%2FLC290SkLqVy4jToUjfhQow3zEYY8Sv2J%2BN6eSAI47SUg0uPLpBRNjKxArk3YswVDjb35qn%2FtZz2\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-6190\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073118a2156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24976,"size_decoded":6700,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"c2b312a66137fa0ea5397ab73dfd01a4","sha1":"f94964c6e33ae18837dc3b3d9078a626722c6bc8","sha256":"9e7d8a5bc21090ecb66d0c44f5c00a061d5a2b8cb301daec57b32152c667d259","sha512":"2cd8377d77387a36529f618edc44dfcb2fd3b387c0c1a7e5a30a4e7d43127ab5bd3f3b4c61bf4da6bd374a9d03a706b70cadb78e72a9a1d2dee9141878053195","ssdeep":"384:EDwYUFj1hnFiqCQA2giOW8V87zrIvh8yOJAyCTESwxz6Qy:xPF1hnFVCQnDrIvh8fJAyCTQxz6Qy","tlshash":"abb2436927249524bd2ba6997687cbc9735ce0048d0ec67c6ee2100cdecd3f964a2f9d","first_seen":"2026-09-17T18:46:24.269607Z","last_seen":"2026-09-22T09:58:52.500318Z","times_seen":3,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/integration/validation.js?v=1789999970","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.891Z","timestamp":1790071088891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /integration/validation.js?v=1789999970 HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6r7KK47IL%2B4lVAWMdAxn9rOnmwzTzBHfQdSaCr6EFt%2Bi3tyip9%2BynMxHriYA1vdCdnCiZ1sm9yXEybxxEZTTh0bwWX%2BoOcTumr6BefUUk8MVYzTDnpnA%2FE4yqpSGNCb6Qnd\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-25d7\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073119a2556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9687,"size_decoded":3991,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2ec1d1f258caf6c5a8f9762294e01299","sha1":"e72ebb394a27cf7cadf9f6322960387a4d31de5f","sha256":"5721b6d29b5e8a25160297afb68994d48e86dfb3027437bbcdef84cc870de708","sha512":"3edfb09ac32128747a38813687742a400bb3acaae269a7de4277942f8cfa5b04c30eba3644d0491b0d73633abb62c65bec04df5286121f25019436b3d46f1da2","ssdeep":"192:jYo+VLJWHMSJ9g5FS7FNCXTVGkJ6FWJH6MQpf88ehnfWrfdugF7FThOUVobvFnqa:5gHCUXTrJ6FWJHE88eJ2duW79o9RnWup","tlshash":"8612a6a831f2242010775af636cf6046729990272c8ac49976ec87453fc6ae5d7f3bdc","first_seen":"2026-08-17T21:05:08.038384Z","last_seen":"2026-09-22T09:58:52.501643Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnedge.io/i/e731f366633cb9d49805b652667b1062/spacer.gif","fqdn":"cdnedge.io","domain":"cdnedge.io","tld":"io"},"ip":{"addr":"104.21.51.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.903Z","timestamp":1790071088903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnedge.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:57:32 GMT","end":"Sat, 19 Dec 2026 13:56:20 GMT"},"fingerprint":{"sha1":"51:E5:04:ED:EE:CC:D4:F3:66:8A:F9:FA:AB:3D:18:B2:CD:E4:DC:5D","sha256":"64:2D:EA:0D:23:42:9F:4B:C6:6A:B6:BA:18:66:D4:DB:E2:3F:DD:91:94:DA:40:59:FF:EB:B5:54:F7:E7:96:6B"}}},"request":{"raw":"GET /i/e731f366633cb9d49805b652667b1062/spacer.gif HTTP/1.1\r\nHost: cdnedge.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5mlX5hD9cuUhXyBBsQHFYAH7bDr1xTR4hVz85YzmgjzjKqoxh%2FEi9k7bKb9I7SKJdlFHsdCXr6ukk2RuEe%2Bhvyjgomauxh1n0SmfdJsmuZWkrgP9K5kqU%2BDcuTH\"}]}\r\npriority: u=5,i\r\ncache-control: public, max-age=14400\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Host\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 22 Sep 2026 09:58:09 GMT\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f0731229bf0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":836,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-22T11:46:09.633378Z","times_seen":1074963,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.314Z","timestamp":1790071089314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://syn-thalora.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:11:52 GMT\r\nexpires: Tue, 21 Sep 2027 16:11:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 63977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-22T11:14:08.613544Z","times_seen":25167,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":21,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.886Z","timestamp":1790071088886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\nage: 373458\r\nx-served-by: cache-fra-eddf8230071-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":4164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-09-22T11:01:03.770129Z","times_seen":1667,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":6,"connect":9,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/flags/gb.png","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.902Z","timestamp":1790071088902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/flags/gb.png HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=5,i\r\netag: \"6ab13b62-32f\"\r\naccept-ranges: bytes\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LtUYNMOaBnzofh1pNAfSwZAaziSPKTPFtVZ3liiXhnYYvRnOu63%2FkMKN%2B5kohow8pam28tj9ispKfFH98Gz34ykMT8g9GnR9MwId1EALdEYceoqd0HDcT3bshGgQywup9IEM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f07311aa2956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 815\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":1506,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"30e0f23c02fc1ac47ee00d5a6ecb2348","sha1":"8b752c78f78ea5d6c4de64cd788c95df9259c557","sha256":"67719906451088b26b713aec46910b10911ad6bab165f3d149dbd2a47bc3bed6","sha512":"4abf2f683f7b790b4cc22e9c53f7c7fc5c282052845b9524637f335cdb77c3ce3e2f925004cd61eb341d00b3bd6e53e6e4ee944a133a51065999b8555f90e0c0","ssdeep":"","tlshash":"cb01752e0f580e7b5c496562492b17c02f88f97fe53df38300605e0d37a365ae0e45b1","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-09-22T09:58:52.50352Z","times_seen":241,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.318Z","timestamp":1790071089318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://syn-thalora.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:11:52 GMT\r\nexpires: Tue, 21 Sep 2027 16:11:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 63977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-22T11:14:08.613544Z","times_seen":25167,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":31,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/platform/synthalora-trading-platform-mobile.png","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.900Z","timestamp":1790071088900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/platform/synthalora-trading-platform-mobile.png HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 16:02:16 GMT\r\npriority: u=5,i\r\netag: \"6ab15508-9d220\"\r\naccept-ranges: bytes\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZJWYOOYGsMxx7CCcCskkBzeI6dkxDpKhV84q1bvDTu02vlbYSl9CphqlCIwuDy8MRdIjNxtlrSRQiSAEATWJGB80uAszUfA154Aua4tYw4dnMrvAIWp%2FIByyU9Rfqq%2B%2FFGX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f07311aa2856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 643616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643616,"size_decoded":644314,"mime_type":"image/png","magic":"PNG image data, 494 x 968, 8-bit/color RGBA, non-interlaced","md5":"30accb9bed6d223d2d443a1c5304ebe8","sha1":"978a92c41f62bfaa909f6b000d431d0ed4f059f5","sha256":"c4a328bc460abef6196a0f21ad6672d7e65e7341168b35347bf4aba966b3e55b","sha512":"1ee83ca6cc12349ae5e004c4f148cc99aa0d7cde9ce60f74c5dd19c40dc5ba54f620f9b980b4177d19716982ce15f3fe2b3df825924191b0f5e0817663bd21e8","ssdeep":"12288:cCUjEVBae/ti0b69FyrvWbGuVKEQpu+cf9pzc25KBrgb+mOj:pUwVxt4EvW73+c98R9","tlshash":"16d42388797230b541af2f69f226a391ecb3bbe412a3c0581450c9d55fe87e2df99d0d","first_seen":"2026-08-05T09:58:31.596074Z","last_seen":"2026-09-22T09:58:52.504105Z","times_seen":5,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnedge.io/r/e731f366633cb9d49805b652667b1062/collect?h=syn-thalora.live\u0026p=%2F","fqdn":"cdnedge.io","domain":"cdnedge.io","tld":"io"},"ip":{"addr":"104.21.51.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.427Z","timestamp":1790071089427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnedge.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:57:32 GMT","end":"Sat, 19 Dec 2026 13:56:20 GMT"},"fingerprint":{"sha1":"51:E5:04:ED:EE:CC:D4:F3:66:8A:F9:FA:AB:3D:18:B2:CD:E4:DC:5D","sha256":"64:2D:EA:0D:23:42:9F:4B:C6:6A:B6:BA:18:66:D4:DB:E2:3F:DD:91:94:DA:40:59:FF:EB:B5:54:F7:E7:96:6B"}}},"request":{"raw":"GET /r/e731f366633cb9d49805b652667b1062/collect?h=syn-thalora.live\u0026p=%2F HTTP/1.1\r\nHost: cdnedge.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://syn-thalora.live/\r\nOrigin: https://syn-thalora.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Host\r\ncross-origin-resource-policy: cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuGnf3Yj6m1fhwqX3WMzY8LC7pjw1BMBQT3i%2F%2BBCrwCxV3Slv9y3GixU3wFO0X8AVjQxpG5c5N7end6FZ%2FePvHw20GxNMsT5OICYiwzjJvlhV85QD0QmeMV00BV0\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f07314e9fa0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":789,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-09-22T11:56:32.592562Z","times_seen":328092,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/img/payments/applepay.svg","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:09.439Z","timestamp":1790071089439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/img/payments/applepay.svg HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gW8qqQfVpNuhHHVsgcoK9TCSzV6kFR8X%2FbYZXIlbHOuHBMmQIBQoxvJ2y9EvLU71gPJvVAVTj1Ryw64UTcSLVnkBSL2YkyOrgCNaYsVuScBlfzws6vi9S6%2B7oOtnFB%2BSytZ\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-a58\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073150a8b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2648,"size_decoded":1962,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d1a5298a0cd5f5a5cc27c4b13c2e7","sha1":"5baa1bcb512c3c0fdc437004ecbc86bb2be7be85","sha256":"bac46e66310cb2eb4a87c921f7a75c588afdb87d7d1c508c73691b4033c012f5","sha512":"6a8673b16dd6bb789e92cd8e8ccb51d22c9ed1239dbec6d5cd3002ef22c36507feed5e096be0f4837f4231fbfc2f95992f2ee54f7a78254e447ab5d7f9d9c5f5","ssdeep":"","tlshash":"555110c55a9466ddf486e96eaf33fb94236f2069b6b6c4401eafc758100f880fa06874","first_seen":"2025-11-24T05:06:10.543132Z","last_seen":"2026-09-22T09:58:52.505247Z","times_seen":19,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syn-thalora.live/static/js/main.js","fqdn":"syn-thalora.live","domain":"syn-thalora.live","tld":"live"},"ip":{"addr":"104.21.78.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.892Z","timestamp":1790071088892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syn-thalora.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 12:05:56 GMT","end":"Mon, 16 Nov 2026 13:04:38 GMT"},"fingerprint":{"sha1":"97:C2:FB:89:FE:45:E0:B6:7E:89:25:63:60:7D:AC:A7:32:C6:CC:86","sha256":"F8:4E:BF:2C:AD:49:CB:54:61:88:B2:C3:4A:51:CA:A3:8C:D1:85:A7:6F:AA:5F:00:FA:FB:87:35:51:51:02:0B"}}},"request":{"raw":"GET /static/js/main.js HTTP/1.1\r\nHost: syn-thalora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nCookie: PHPSESSID=adl9ui3jb2q5p5c1g3vrdhn7a3; synthalora_keitaro_subid=18uumd0.1bb.igl07\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 09:58:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSZ9CpDRMPYBw%2BXHuRRhVu0s0t24ftTXu3J2bboCzXUgVmLVqK%2BhBJkhx66PmGz72t8xzZ19OExgr7QVmtpQEE8pIdDOd9%2F1SXzzYiPRaT5VeUdQtvE7cIZchI0GE%2B6xod9y\"}]}\r\nlast-modified: Mon, 21 Sep 2026 14:12:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13b62-bae\"\r\nage: 557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f073119a2656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2990,"size_decoded":1894,"mime_type":"application/javascript","magic":"ASCII text","md5":"2ced5fe8b0abea27bc15232482fdb11b","sha1":"3093b4e51f5206fb2950dce8538b917c329a7e52","sha256":"5db8505b600a0a43f1fe1731270846ef9d919dc2733db0455db3c6d150a090d1","sha512":"ffb5f2a14dac962cc076b971e50cc82cf3656b2c56121977b6c413d54aa8b4b82ec912a4bf9a89a4f897c90b429eadd14c1e4e6d2a6852cfc209e5ca077504ce","ssdeep":"","tlshash":"5951433871b53437007751f997c3a286b624204fb243d8ae75ac8a8d2fc682529f79f8","first_seen":"2026-08-05T09:58:31.582724Z","last_seen":"2026-09-22T09:58:52.506781Z","times_seen":6,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"syn-thalora.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"syn-thalora.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnedge.io/js/e731f366633cb9d49805b652667b1062/app.min.js","fqdn":"cdnedge.io","domain":"cdnedge.io","tld":"io"},"ip":{"addr":"104.21.51.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syn-thalora.live/","date":"2026-09-22T09:58:08.895Z","timestamp":1790071088895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnedge.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:57:32 GMT","end":"Sat, 19 Dec 2026 13:56:20 GMT"},"fingerprint":{"sha1":"51:E5:04:ED:EE:CC:D4:F3:66:8A:F9:FA:AB:3D:18:B2:CD:E4:DC:5D","sha256":"64:2D:EA:0D:23:42:9F:4B:C6:6A:B6:BA:18:66:D4:DB:E2:3F:DD:91:94:DA:40:59:FF:EB:B5:54:F7:E7:96:6B"}}},"request":{"raw":"GET /js/e731f366633cb9d49805b652667b1062/app.min.js HTTP/1.1\r\nHost: cdnedge.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://syn-thalora.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\ndate: Tue, 22 Sep 2026 09:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Host\r\ncross-origin-resource-policy: cross-origin\r\nage: 557\r\nlast-modified: Tue, 22 Sep 2026 09:48:51 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yK1Jjof5hC89qDL2jVj7w%2FmmKhHI%2F6Hi7hEo6aAGTfvRTI8wmZQG18A4aTaNSXv51tGWWBoCx%2FULs4UA%2F0xHb0P6xFCAm%2FANZJgQxQ7sz0hiKglV9ZI%2Fu4J1K95%2B\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f0731229be0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1005,"size_decoded":1441,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"431b27468a06ab25560ef65d75f7b9dd","sha1":"f75908f38b95a60f09785567443de70a10cce756","sha256":"695ba775b99028f3eb853ed45faf1578c638f53b2264258f0a11ce76f89b28e2","sha512":"c42da6c91436bee0cc9e5fd4b2d08d6d33ba0b4ad07714dda4eb4b39fb8733093069d4d325fe708ae799d238eb3f824c7f472fbc51aa42a463ebe670694fd199","ssdeep":"","tlshash":"a111543971917a916bba70b9123f480b50af3b13dbc840e9646e88c41a7554cab33e9e","first_seen":"2026-08-19T04:07:09.181405Z","last_seen":"2026-09-22T09:58:52.508293Z","times_seen":5,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}