{"report_id":"afbe060f-fe04-4898-b9a9-247a14f869d6","version":6,"status":"done","tags":[],"date":"2026-01-02T17:51:44Z","url":{"schema":"http","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"title":"Drake Maye Stats: Unpacking His College Performance","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T17:51:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":20}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"affirmshavebiology.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"affirmshavebiology.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-01-01T07:47:27.133157Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":383,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2025-12-27T07:29:55.684504Z","alert_count":10,"request_count":5,"received_data":134389,"sent_data":6573,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-12-30T10:54:18.159058Z","alert_count":15,"request_count":5,"received_data":134259,"sent_data":6601,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-12-29T13:33:59.184771Z","alert_count":4,"request_count":1,"received_data":529,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-31T21:11:25.087578Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":732,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-31T21:55:03.360474Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":378,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":2,"received_data":152718,"sent_data":845,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-12-29T08:41:45.084205Z","alert_count":0,"request_count":2,"received_data":156516,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.montenews.me","ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-14","domain_rank":0,"first_seen":"2026-01-02T17:51:44.887049Z","last_seen":"2026-01-02T17:51:44.88705Z","alert_count":0,"request_count":6,"received_data":356481,"sent_data":3458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]}]},{"fqdn":"affirmshavebiology.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":94316,"sent_data":836,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-30T21:57:49.11287Z","alert_count":0,"request_count":2,"received_data":850,"sent_data":824,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4be4ac1c396efe20391a2b33c6ac974c","sha1":"8c473f70bfcd45c95b735caab51d694cbd4123ee","sha256":"c8efb57df5787c894904d2348ed30dab3678d65fb31b2c6b1ca638d3cc3f2008","sha512":"8e87b333e6fff000b2bff93d4fbcf4e582ed660cb90000b8f229ad23599c00756bb422b50cf74b0a60bb5b9b49fade6f22cefb93e3ab680f87f260ccef7d6fc0","ssdeep":"","tlshash":"5331e7b452191833ceadb572316f32989e57dd448e4a9ec334395e8069341fd4b66c9c","size":1802,"data":"","first_seen":"2026-01-02T17:51:52.14984Z","last_seen":"2026-01-02T17:51:52.14984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"748fcef42248731ad6c51862589ccf4f","sha1":"2fb445a50fd7a050cd2d424c1f693365be1a74f3","sha256":"f3106c26238edf4ba7016e42ecc583bb9a4bcf9a205b1a2b080f49c7d9473019","sha512":"93a128f9243cdf53e8b8b3177d26697b15feb9c0325adef9eb232bf67814b244983f7481ed89db7936434ff2c435f38832e485c81a98a4e757a0c982170cf574","ssdeep":"","tlshash":"60c02bfd9408f34c00b2cc010cece400a304cd20380c551730d044354358a34886237c","size":139,"data":"","first_seen":"2025-10-29T20:34:53.416261Z","last_seen":"2026-02-20T14:55:24.677185Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c72ead343ef525780820a3b76f503882","sha1":"991ed565baec294455c3e885fcf60070eace10e7","sha256":"59d5338582995ffff0dee5ade0bdc802b5fb92d0c4224f0f8bb96d381a45dd68","sha512":"115fd221518c85f221a9f52e7aec5475dc655594f923dac50fd885916061215302308f9f1933e11c4720bee2bc4f0033f3fd58dd68e578c26c02458b86b78ef2","ssdeep":"192:dFIDO4LNMLpY5cOWOpkNxpvmZ7xpigpVmmEVIUvhBFb6OKQEVvGyHETVvH2RFXEj:dFIC4LNMLpY5ZWO6rt67x9bcVIQBhKdg","tlshash":"0a22f88eb58df0a00276557419b7e2c604a5afde34345f8e82019cf2fe6533446aefa8","size":10462,"data":"","first_seen":"2026-01-02T17:42:26.928081Z","last_seen":"2026-01-02T18:20:58.787088Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/0a/f0/0a/0af00a3737696d67bc50123cbcb22305.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"212a8c246347a5e08eaa2cf770c99a04","sha1":"6754b2f4edd6cc4644b78a8c28ab5ff8c4728413","sha256":"b5e81834bc9624c2fcdd48d006e4d9a650579ef54dbb1a84df899070c753d2b6","sha512":"0c1fc62025c154cf59cf1acf64150cf73159e64c0c2eb8c7f29b25834a86984c0abbf30bf4ea5027989077a75189198d44c6f77fbf1ee80753bc3dae2322ea7f","ssdeep":"1536:TdzPoXVqfRjblFEvzOc+NxPXLZC8kvRQGntv7p4WKM4OLAZVCAFhuEQEX:eqJjblF2zOnC1JQGntTpU5oEX","tlshash":"40b3d9987f01b05c07de703b252fb71bf55a1e59298cd6d4e107f8ab1a9c70be83a612","size":111858,"data":"","first_seen":"2026-01-02T17:51:52.14541Z","last_seen":"2026-01-02T17:51:52.14541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"a838771d2ca9e5cf070fecd9d907c931","sha1":"015bf1504b133c20222523a9e3a3f9c475bd8768","sha256":"8bab3b177234abcb351a931ce166820ced7d3372e49d86142e9bfd7871e6366b","sha512":"e8a3961fb3ba5d39c837124d7b3cc04230b0e38804af56f20eedafc5c522e47bb35f33b6e4c292a7ee60d0f970d4bdda43f5a29e588828e4a910558b086617cd","ssdeep":"","tlshash":"bc31e7af735e347079a365b743ed65cd6d7f088d8e082a8962802a442434db8163de89","size":1792,"data":"","first_seen":"2026-01-02T17:51:52.152494Z","last_seen":"2026-01-02T17:51:52.152494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4068bc0684fa64ec7d7d633020c67bbe","sha1":"e72109c484bf70cf3cf750989fcd639a266ccc32","sha256":"76d77b892060dd6cb1389027f08edc1fa9c1b7b124bf860dde276f3b465b89b3","sha512":"75d4050d8980973602476d6e13876043700d16ae8c0f59b787e349e48c20d615f6d6ed7fd67fff977a580e0a3f3cad8c0d5000b0b55db82dff05ee154b074b25","ssdeep":"","tlshash":"ddc02bd48104fb880071dc240d7ee18092008d003d3a042bf6d01c274270c55c8c13ac","size":140,"data":"","first_seen":"2025-11-05T04:43:27.627882Z","last_seen":"2026-02-20T14:55:24.678638Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7daf8988028b969a6858d7b7e7816890","sha1":"5e18f8406da72942cf1409f8e2fb513014237757","sha256":"66cb55622b7f7abdffebf9c07405d832c9ecbf5c6baeb63d17dddd1e22dd3a9b","sha512":"cd51a8e125b0b21812e6ba1d2255bd342ba05d4ea8ff3eb9f017956d9a8c0eab4b8bbc4c7f2f7f5acbc4f9789d90eacb3dd1fe076941aec6a7988c13d01d965e","ssdeep":"","tlshash":"0b31b92b23f7093551bfa19e736bbb983664019fa182c846361ccf5c6f60e8654f6bc1","size":1833,"data":"","first_seen":"2025-08-11T15:31:56.332465Z","last_seen":"2026-02-20T14:55:24.680219Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0926eae980761d8f670e92fa5c26c4d","sha1":"28e668a5d4541ed9692a994a433e6b81e1097e1a","sha256":"2e26ac68b69fbe753ae4982711821e8e1a8aa2dbadd4e88be4616ea4a16faa2b","sha512":"cfa6ad1ec659495f0f2de7d530ad41b7881257d174db275e32ce1b7c9e07fc8e4372947128157d2d6d070fb275b8c80b0236b616f808d4efdf1232e9eee38dbc","ssdeep":"96:nENHRozEWJp3XYZZV5AjBDgAk/eYZZV5AjBDgbO1jDOGOCfMEDaH:nRzEQ4p5s3kpp5s+yvOGOCkCaH","tlshash":"d3a1fa9a6b997074346324bf43fe544c7e7a044e9a08ae49b28ca5452b70fb41d3dee8","size":4705,"data":"","first_seen":"2026-01-02T17:51:52.156385Z","last_seen":"2026-01-02T17:51:52.156385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"97df5e3310a6580aae757b9cd7ff3def","sha1":"45fb58a97979a743625b885ab3e43d71565c712e","sha256":"46b110410c9bf5ff25c37b3f753b071dcd71b52ce467b8625d4cc2cb5403498a","sha512":"d875039085b5184b35c7a43a1e36328e79d6a21322d8a20f460204b60e40e4217e19af11172ca9615ab060478039b96372740b5ac5d87363e1f335348e87acc6","ssdeep":"","tlshash":"bec08c882b080d5272203c2e1b0337c468c003023d332c1af6c8c800b4b803ac8c0080","size":145,"data":"","first_seen":"2025-11-05T04:43:27.633788Z","last_seen":"2026-02-20T14:55:24.674388Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affirmshavebiology.com/141a21b1910431caa239e90e0dce9c9a/invoke.js","fqdn":"affirmshavebiology.com","domain":"affirmshavebiology.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"173d6e1d81daf683eb750486ba54cbc1","sha1":"21e3cda5a7a72ae8f5f42d599506a1029444878b","sha256":"a9654a5e37fe69d38f305a1f4d5d49cc67dee00152f8f6a531cd0d3f9bd1c1b6","sha512":"eb9a3e219821b071075d21e56ac05e388f7893de272802375e5e69c6a9fa08f5f5c3721f6ab46f49c7010bac0dbca7f418a1467d5a57859130621b1a0ef7b71e","ssdeep":"768:dB2EL/5+sNKlKMHLQTwkf0R8sYeLvLoK12G6FYc0Cb6Rf:dB2EV+aMHLQTwkf0VLDLoK12tFYNKS","tlshash":"3823fa5dbf92f006165f70b7376fa106b11a8c19680cd89cfa07fda46d68f05e837aa4","size":46298,"data":"","first_seen":"2026-01-02T17:51:52.128862Z","last_seen":"2026-01-02T17:51:52.128862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60a4784dc5a3620c282e5ba6508d326f","sha1":"7bfb31d827dd8e6ead558e84ca23563a7c9bd42a","sha256":"48953ddbc36d21ad23e5107e7d3c7e13fa98617a8ea60c01e85b263c91b252d8","sha512":"8ce62ce8ef20e9891116f535762ecaf2f8da75ae6863a7513f4c29da29656b5e0e0099e68dc8c10975c9de576dbeb275ec1f76ec94a7fe1563d257bbe9d5b768","ssdeep":"","tlshash":"b1a0118008a3082ea022b238a82bb308aa802020a20ca2280c2ae00c0c0882003388e8","size":77,"data":"","first_seen":"2025-10-29T20:34:53.432699Z","last_seen":"2026-05-05T10:21:06.108811Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9d006d6e1b55cf20ec9fd0423e51892","sha1":"eaee2378d877108a2e8afc138fc2762839c0b268","sha256":"aefc68eb89f03f38e1f466966a88d5f29bc50558230dcf00c500e1ca8ac36237","sha512":"eee46e562b58b7a076af95988e9016d1fac6307165cdad621fb9615eb74e735b952636fa5b907f91786ef1499b6840c4ecf6843ce9d2ea7f796c13384b200cbe","ssdeep":"","tlshash":"661104753a2a1534c5d54147317de7a93d3250217a029044c36ccc255d18e8714dfcbe","size":902,"data":"","first_seen":"2026-01-02T17:51:52.160023Z","last_seen":"2026-01-02T17:51:52.160023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/highlight.js/11.11.1/highlight.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43d5372b6165de50a5320cd67559be3","sha1":"b65f6d3a06f8ae06c184e491c8ae237ff2416fd5","sha256":"c4a399dd6f488bc97a3546e3476747b3e714c99c57b9473154c6fb8d259b9381","sha512":"1012f350bf172e5faf6bfcc0b265f04bb67607517d1d41e4670c92fd52b08774bb4ff5349c5e01694dbd10ffd949feb38222316009ca2eee9b27c76aa665f9bb","ssdeep":"1536:1G2dXrpO5M+LyD07rFc7oj/Mx50hzGeCZ9oGxvHuBLYKUAjhaohZdH7gownSZcKb:1GabpaM2rmCwist9rxvOBx97QajGW","tlshash":"1bc33c266cab7d3e8bde51cb389e0400bd98e412f70ccc89f6eede30915541652d7ab9","size":127496,"data":"","first_seen":"2025-04-15T17:22:06.590861Z","last_seen":"2026-05-31T04:10:41.495323Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/84/1c/e6/841ce61e23961d1a22f8b4bb57a97d0f.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83bcdacf276d3f937ae8f30159220c5c","sha1":"048119c9d5b3a61bbe16ce3d3695a93dd3fbfd04","sha256":"e4462072e18b313275b6073c0e2b42205f12e19e790e46828ac4139a7898a6ed","sha512":"27c630dfd26d27e62a2e58738195980293127147c8093859f7d3320902e371ba6622241c9d405224b7c204112fad0363f3bd2a744415b03880f22347b769ddfb","ssdeep":"1536:T299TbVqfRjblFEvzOc+NxPXLZC8kvRQGntv7p4WKM4OLAZVCAFhuEQnX:KqJjblF2zOnC1JQGntTpU5onX","tlshash":"1db3d9987f01b05c07de703b252fb71bf55a1e59298cd6d4e107f8ab1a9c70be83a612","size":111920,"data":"","first_seen":"2026-01-02T17:51:52.142228Z","last_seen":"2026-01-02T17:51:52.142228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0e732cd75a624b24492726c5663aabf7","sha1":"6597c514004417319d4cc183d79d93ad80b3ca62","sha256":"02f671786ab9c4181fc2fb6560e11e9b2bb693ad6e08f9f4bb3a11144666d683","sha512":"ea043c9bbd180440da7eb6cd2e0234888914d9ae6946250bda706a50883a020fecc7d1775685cee71ad51264cb6a4208d04b979ae087252e0ba189a1324fa2bb","ssdeep":"","tlshash":"8d3129ef635e74b83362446e43fc048dbd7b089dea1519ac63d0390836b0e311a2a6f5","size":1522,"data":"","first_seen":"2026-01-02T17:51:52.161149Z","last_seen":"2026-01-02T17:51:52.161149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"208154891081beddb2121d32cd47fe74","sha1":"52cced5760645c5ff92537f8702d50108e8a8161","sha256":"617a86ea04b80118dbb071c318e30286f20018dd3cffb6329e0465267fb9c494","sha512":"5600e5a865754a9fbbcbd5165d9322dfc90167591eaef589209f5c357fd48eaca23f2db7916a0c3bb56afab4ad297fb8dfb0816af2f70821993f6509359eb1dd","ssdeep":"","tlshash":"f0c08c443f04301869a0388e9ac603807fc1031eb82c7f08a0c18090b09e1334901038","size":145,"data":"","first_seen":"2025-10-29T20:34:53.423077Z","last_seen":"2026-02-20T14:55:24.68123Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21e3efa910b5604623178c194fc3b6c0","sha1":"4081d9bd65a27f2798dee8ce945145b20996fcae","sha256":"c2332e6a2ede51e05af8bdf846e602285f183acc8a86335ec7fe7dee3831da0c","sha512":"1f8caa28e785f24215f0c5aee1a8e89982f58f1abd86b5ec59fc30420d4591ef90bed002f97cf7f179836700b205db0fa97bed8f3f6e90a29e8b36ea10e485c2","ssdeep":"","tlshash":"35d023a57875883051a4024720f5e7d536716150b755a640c1dccc1b6e11fd31cf195c","size":217,"data":"","first_seen":"2026-01-02T17:51:52.163412Z","last_seen":"2026-01-02T17:51:52.163412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affirmshavebiology.com/ad99851379c793978eab9e0499eecc78/invoke.js","fqdn":"affirmshavebiology.com","domain":"affirmshavebiology.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c177586e75c26dc7750c5f766489bab4","sha1":"3efb1ae9bd9dfff08ebbb3cfdf6bfe346b51c743","sha256":"8f76e59f05f019bc545a87a1c7f3686a8d86de1a779c92503d76d5c2508c43e1","sha512":"e8232e3da0119e25aaef95fa4475448cb611795de991e43d3bb361d99fa4537506cea1d6161a9febb54197c3d5b8d85c6df8e404db6106cdb0f86d39452b8062","ssdeep":"768:dB2Ef/5+sNKlKMHLQTwkf0RZsYeLvLoK12G6FYc0CnWr:dB2E5+aMHLQTwkf0gLDLoK12tFYNOi","tlshash":"1b23fa5dbf92f006165f70b7372fa106b11a8c19680cd89cfa07fda46d68f05e837aa4","size":46322,"data":"","first_seen":"2026-01-02T17:51:52.140687Z","last_seen":"2026-01-09T22:26:54.715094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-31T05:11:33.088947Z","times_seen":17410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0b9b9ca21311307011a67e106bbf893d","sha1":"d0756bb03bf40418a540946aae8131b8f775d520","sha256":"c0440394577e6358c2028967432aee99a25e5b4fb1c6387ad3aae4ff3d80a228","sha512":"10e3488d272dc1c2688f4bb93c30d2e6faaa8d6949b3ed9e4ccfd3cab004196439754a53a895178896910cbfe6f71556e9ab3cf05bfeb0f0c2bd7f18612e226f","ssdeep":"","tlshash":"a5312c67a03327ccce3a59d56565a607e6870d38dfc088c05ef40095e6014b7ccf7132","size":1532,"data":"","first_seen":"2026-01-02T17:51:52.164648Z","last_seen":"2026-01-02T17:51:52.164648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e78f4abf7a147e2979603cbc06b1437c","sha1":"adfe69203bf1bfb9d97b320159fb13c84e9d50c3","sha256":"646fa5f43854601a139f83e48fd0d40bf24b331b36220d87b8b3e3f694c56ad8","sha512":"40bfed39ee857553e1029b7fd5dff9fd290fefceb8deb6560c4f17ece88480e835ac6b21664e2959dd69c5b112c1a42c1cd99e29e9b893a35ad7d2221d8dc5c6","ssdeep":"96:NCozA5KJk0BmrBcYM5dRBfk/dle54nuveD9NbQ6lVXvw1jDMCfMEDaH:1zdAuYMdRBkmvq9Nc63/ovMCkCaH","tlshash":"71914c655d96167ccc26747e313bb108b94289095f41cc82bdacd681af306f8cdfaa98","size":4592,"data":"","first_seen":"2026-01-02T17:51:52.165778Z","last_seen":"2026-01-02T17:51:52.165778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sourshaped.com/watch.548437293821.js?key=141a21b1910431caa239e90e0dce9c9a\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=9c4d5d20-2485-4553-9107-1250bee313e0%3A3%3A1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /watch.548437293821.js?key=141a21b1910431caa239e90e0dce9c9a\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=9c4d5d20-2485-4553-9107-1250bee313e0%3A3%3A1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.montenews.me\r\naccess-control-allow-credentials: true\r\nlocation: https://sourshaped.com/watch.548437293821.js?key=141a21b1910431caa239e90e0dce9c9a\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=9c4d5d20-2485-4553-9107-1250bee313e0%3A3%3A1\u0026shu=4a1e7b62e617ea68b501397ae2302f648474cdf968a4b250d8a90f5213e26587987b3d3b5a9d747b81a1ea9139c59d2273f6e23a9997bdaf102c6401080524f047e9e2e1551f539d439b7271dde2a213d09636d3a97968c3b80278\u0026pst=1767376342\u0026rmtc=t\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.pubk9RyFa8e5ukJHuzTymLyPc-3eUMVk9YneCNp2gmg; expires=Fri, 02 Jan 2026 17:52:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9ccff5318b8edaeaef28b96c7f924e60\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4737,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/highlight.js/11.11.1/highlight.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:21.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/highlight.js/11.11.1/highlight.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37714\r\ncf-ray: 9b7c1aa1888b56bb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"676c489d-9352\"\r\nlast-modified: Wed, 25 Dec 2024 18:02:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1260728\r\nexpires: Wed, 23 Dec 2026 17:51:21 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=x9h9w7JO6mwQqfhzEDrPK3eisa95QbxDjvU8aR9py%2Fl5pbOZpT%2BXxBmoOK3fxmG4FZOBb0m5a5R%2Bo3L1sJhY2%2FZGbvsefk5wWOXyxlYFPSyIHe5iDYoC8V2qWyJzvc%2Fa1QcGWSGL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127496,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11260)","md5":"e43d5372b6165de50a5320cd67559be3","sha1":"b65f6d3a06f8ae06c184e491c8ae237ff2416fd5","sha256":"c4a399dd6f488bc97a3546e3476747b3e714c99c57b9473154c6fb8d259b9381","sha512":"1012f350bf172e5faf6bfcc0b265f04bb67607517d1d41e4670c92fd52b08774bb4ff5349c5e01694dbd10ffd949feb38222316009ca2eee9b27c76aa665f9bb","ssdeep":"1536:1G2dXrpO5M+LyD07rFc7oj/Mx50hzGeCZ9oGxvHuBLYKUAjhaohZdH7gownSZcKb:1GabpaM2rmCwist9rxvOBx97QajGW","tlshash":"1bc33c266cab7d3e8bde51cb389e0400bd98e412f70ccc89f6eede30915541652d7ab9","first_seen":"2025-04-15T17:22:06.590861Z","last_seen":"2026-05-31T04:10:41.495323Z","times_seen":203,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":19,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.651977194375.js?key=ad99851379c793978eab9e0499eecc78\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01%3A2%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /watch.651977194375.js?key=ad99851379c793978eab9e0499eecc78\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01%3A2%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.montenews.me\r\naccess-control-allow-credentials: true\r\nlocation: https://wayfarerorthodox.com/watch.651977194375.js?key=ad99851379c793978eab9e0499eecc78\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01%3A2%3A1\u0026shu=90c295c6742a8cc2059caeb948f4caaaeb3656818bc1db96f6fcb85867875d319010bab2ab784855a50c6f1a72aa327e2b7fb01885143e6ed9882b3756fb9f143c3efb6b926319cbe4b2bb4f021f148cc933f743611a769e23b118\u0026pst=1767376342\u0026rmtc=t\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoxNjYwNjExMCwiayI6ImFkOTk4NTEzNzljNzkzOTc4ZWFiOWUwNDk5ZWVjYzc4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNTU0NTgyLCJwaWQiOjMxNzQ1MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjo1LCJwdCI6NCwicGsiOiJnZHU5eHB2YyIsImNwa3MiOnsiMjgiOiI4NDFjZTYxZTIzOTYxZDFhMjJmOGI0YmI1N2E5N2QwZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiY3QiOnsiaWQiOjMxNDMyNDQsIm4iOiJPc2xvIn0sInJnIjp7ImlkIjoxODQ0LCJuIjoiT3NsbyBDb3VudHkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly93d3cubW9udGVuZXdzLm1lL2Jsb2cvZHJha2UtbWF5ZS1zdGF0cy11bnBhY2tpbmctaGlzIiwidHoiOjEsImFyIjpbXX19.AzUMxfvSd81OPBKN3WliK83emt6zCz0uvliwUuaB3eE; expires=Fri, 02 Jan 2026 17:52:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 8\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b676b4d2cd4ba62cc7c43c6cdc4cd51a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4625,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2091\u0026rd=2091\u0026fd=461\u0026bv=25.12.4806\u0026tmpl=136","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2091\u0026rd=2091\u0026fd=461\u0026bv=25.12.4806\u0026tmpl=136 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":296,"dns":13,"connect":93,"send":0,"wait":96,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/20/3e/15/203e15a4a37c18e718735a3cc9317a62/1708270295.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:23.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/20/3e/15/203e15a4a37c18e718735a3cc9317a62/1708270295.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85236\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 18 Feb 2024 15:31:43 GMT\r\netag: \"65d222df-14cf4\"\r\nexpires: Sun, 04 Jan 2026 17:51:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85236,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2024:02:16 15:13:33], progressive, precision 8, 300x250, components 3","md5":"a243301a72999b8de16df631ade6b6ed","sha1":"4a73bf3593d21fc3d576bee7abf06395ea58bc31","sha256":"21a3a022e5e5ca83d90331629f291c8cb589a453f8c45a5707a5fbf3bbba2811","sha512":"f43858dd0aa8c3b317f790d0d020f0325f6398ac64e05d98bdebe09f7c4f47a117a988db83076d5da31c24852127c48f237da812f7412aa41c89c7034daf5e63","ssdeep":"1536:GIvle46bLjIvle46bFcprtToL7+YEacDOTx1WmXnjl+rPH10MlGVek:GIvlezIvleCA2YEv4x1njlOP6eGVF","tlshash":"a483f135bb5dec52edc03939bd71d2422622abe502530b16b96cd2d237bc290de1dd8b","first_seen":"2024-02-20T22:24:35Z","last_seen":"2026-05-19T07:53:15.707141Z","times_seen":1002,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":44,"dns":1,"connect":19,"send":0,"wait":81,"receive":18,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/favicon.ico","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:23.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"montenews.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 22:21:00 GMT","end":"Thu, 05 Mar 2026 23:19:42 GMT"},"fingerprint":{"sha1":"94:51:B3:A4:E1:80:23:86:A5:48:4A:FB:AA:67:1A:5F:74:EB:80:23","sha256":"1E:BD:EF:CE:67:20:16:5F:4C:C0:1C:11:38:0E:AE:BC:4D:B8:90:0E:9F:E3:87:F8:A5:05:84:12:97:C7:6B:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.montenews.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.montenews.me/blog/drake-maye-stats-unpacking-his\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=960b0633-c2cd-4ee8-884b-4f1ab101eb01%3A2%3A1; cf_clearance=aWUtgSKZhzpJCf.ksThcReHOzrz_rENPUUddzDvAc1g-1767376282-1.2.1.1-651K1hVf0DGjNjzMModMHyQAd5xBpbJ4jh5u_lEXR30ZZTjA9LrEokL5BR9Y6XBBBD1jx9NvU_oP3etVLhXAZINvxO0k5hadBEVbrk2osHNlQCPdJZ4Jp5RkgJnZuDyBWH37rWMbcSpOoIONev.CYGRJebNBt.RPNTfodtYoqzh.9Ppqjbm5gEMDCR9Y3yV6wDl7P9_gUWFna4eo3OaXyzq0u5y5sMHUPy39L1mv5QY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 17:51:23 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\ncontent-security-policy: default-src 'self' https:;style-src 'self' 'unsafe-inline' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;img-src 'self' data: https:;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, same-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none, master-only\r\nx-xss-protection: 0, 1; mode=block\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 07 Dec 2025 22:30:14 GMT\r\netag: W/\"45b26-19afaefd8f0\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0sWvs6DvsPjaKuEyfHKQVyEPSryuOCZjFa0xYax%2Bh%2FfrdNfnCDqFD414NVs0S24vpMxbMOEM1R9h34%2BOSUrb7KX0P1aADGUMWhYkSYy\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9b7c1aa9e823712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285478,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e75851ca520e67b67bc3c8a3bcae749c","sha1":"316c21bf083a280c8a6527d7312e61d3cb4c372b","sha256":"dfb45944abb91893b2cdd2415db71f63ee6d72e6a7c6f523b23ffd2ebef7c7f5","sha512":"17c862e1c2a8d00b94fe4c27c2399d8329f9e218c76df82cf94f5f13391289211a939e08672207b2a6a8024251ba9fe3d6af70dc83ed3c20515c432dcdc7a3b9","ssdeep":"192:h3k/Y+P09HeotaYntxRHjwibQ2WDG436Ot8cHR/LtwZvM/K5Ghf1Zr4WiyJIqgj1:pg79Qu","tlshash":"ed5446e75e386583f242393997a8d1b7fc046101ce4b862592639d0bf02769ef6d2f4b","first_seen":"2026-01-02T17:51:52.121611Z","last_seen":"2026-01-02T17:51:52.121611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":768,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/image?q=Drake%20Maye%27s%20Explosive%20College%20Career%20at%20UNC","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:21.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"montenews.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 22:21:00 GMT","end":"Thu, 05 Mar 2026 23:19:42 GMT"},"fingerprint":{"sha1":"94:51:B3:A4:E1:80:23:86:A5:48:4A:FB:AA:67:1A:5F:74:EB:80:23","sha256":"1E:BD:EF:CE:67:20:16:5F:4C:C0:1C:11:38:0E:AE:BC:4D:B8:90:0E:9F:E3:87:F8:A5:05:84:12:97:C7:6B:E9"}}},"request":{"raw":"GET /image?q=Drake%20Maye%27s%20Explosive%20College%20Career%20at%20UNC HTTP/1.1\r\nHost: www.montenews.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.montenews.me/blog/drake-maye-stats-unpacking-his\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 17:51:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6047\r\ncontent-security-policy: default-src 'self' https:;style-src 'self' 'unsafe-inline' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;img-src 'self' data: https:;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, same-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none, master-only\r\nx-xss-protection: 0, 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: HIT\r\nx-cache-source: lru-cache\r\netag: W/\"179f-PrYNmvzTlf6E0EMKsAzw0IP9dHI\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omHtPG%2B3mK5u4weDJM4yuRIqg0FEd0CSU3YrBITy%2FTyj7gYicSyXI9Djkzw7PIEUHRestyI0EiqHDK5F0%2BtyESzAV46pJN61Vqx1r2It\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9b7c1aa16f83712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7777,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"afb0b6ed24693d325c38edc70e1f5407","sha1":"5429967f7a8b3504f3ad11eb5683107102e0614e","sha256":"6f6de7576d204e27acec73e397ed28d6da8df785d5466b3b95358c66c6cf3a6c","sha512":"c7fe8a3c5441686dc755962a565b90d13c012d4a19232868145969220e472b8e64c61616d76a84ecbd2259e5c3d1a0b42aab1f91b4ba85132ce0df6d9b40e630","ssdeep":"192:LGfIIXEE8quJxWKYtkMNWs4YoBefX0W08q:SQ2oJsKYtkMjFxEWs","tlshash":"a8f1e5535f0e0b804a0541f97e5b5e5dbf89684e0ce6297c20638ee35c58fba1c8e28f","first_seen":"2026-01-02T17:51:52.125428Z","last_seen":"2026-01-02T17:51:52.125428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affirmshavebiology.com/141a21b1910431caa239e90e0dce9c9a/invoke.js","fqdn":"affirmshavebiology.com","domain":"affirmshavebiology.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:21.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"affirmshavebiology.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 08:13:13 GMT","end":"Sat, 14 Feb 2026 08:13:12 GMT"},"fingerprint":{"sha1":"05:09:2A:C0:8B:ED:3D:69:53:21:0B:3F:69:42:E9:52:A4:64:EA:A8","sha256":"9A:36:5E:7E:42:C8:F2:99:65:D6:1E:B3:8C:57:55:3F:F0:F7:A5:23:2C:E5:D4:57:AF:0E:FC:44:A8:CA:E6:CF"}}},"request":{"raw":"GET /141a21b1910431caa239e90e0dce9c9a/invoke.js HTTP/1.1\r\nHost: affirmshavebiology.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18553\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: affirmshavebiology.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fbb163a710e30748c366ec6f570483f2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46298,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46298), with no line terminators","md5":"173d6e1d81daf683eb750486ba54cbc1","sha1":"21e3cda5a7a72ae8f5f42d599506a1029444878b","sha256":"a9654a5e37fe69d38f305a1f4d5d49cc67dee00152f8f6a531cd0d3f9bd1c1b6","sha512":"eb9a3e219821b071075d21e56ac05e388f7893de272802375e5e69c6a9fa08f5f5c3721f6ab46f49c7010bac0dbca7f418a1467d5a57859130621b1a0ef7b71e","ssdeep":"768:dB2EL/5+sNKlKMHLQTwkf0R8sYeLvLoK12G6FYc0Cb6Rf:dB2EV+aMHLQTwkf0VLDLoK12tFYNKS","tlshash":"3823fa5dbf92f006165f70b7376fa106b11a8c19680cd89cfa07fda46d68f05e837aa4","first_seen":"2026-01-02T17:51:52.128862Z","last_seen":"2026-01-02T17:51:52.128862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":326,"dns":46,"connect":92,"send":0,"wait":111,"receive":93,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"affirmshavebiology.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"affirmshavebiology.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f212ac0861177973b5037726d85cca70\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":296,"dns":2,"connect":92,"send":0,"wait":101,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.montenews.me\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=960b0633-c2cd-4ee8-884b-4f1ab101eb01:2:1; expires=Mon, 31 Dec 2035 17:51:22 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0bd7895429e9da6d1a3e195c2511341a","sha1":"73151e46bf78b2c3a62fdde54dfdece418f89f1b","sha256":"dab0749b702356654f328a86d2dfea8246684fdfd58e4bde0624dc4db7bfd788","sha512":"6b6b03fda634c4562d5ed07f08f97febeb02d7f039861b522bc8c82ef00cbc5ac6083f08bb44723de03e6d98986ccb4533247d01c335e88e4126afe5c912e51c","ssdeep":"","tlshash":"ba90041530153d0d00f0455c4c051d535d57c401431f41311f4dd00f34041c14f313d1","first_seen":"2026-01-02T17:51:52.132753Z","last_seen":"2026-01-02T17:51:52.132753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":79,"dns":1,"connect":27,"send":0,"wait":22,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.9/katex.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:21.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/KaTeX/0.16.9/katex.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2797\r\ncf-ray: 9b7c1aa1889256bb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"651b4556-aed\"\r\nlast-modified: Mon, 02 Oct 2023 22:33:58 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1195655\r\nexpires: Wed, 23 Dec 2026 17:51:21 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wzV%2FMeSTyrCj12jD%2FSOqfI5R2wmcHDVdTk8YIVGbzHiFITjW%2FnPI8sAr4UvFA50Rqus5sx6oLuIIE3Fdk1g3d21vbTQ0x4wHzyJ1hv1yzxl6e%2Ff1im5kXH1NybQ15i5OPLKHU24w\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23195)","md5":"1612bcd72cc503f18e2f302b3a2addd1","sha1":"94edbc490693da7f3ce048546ed3b790d8810247","sha256":"505d5f829022bb7b4f24dfee0aa1141cd7bba67afe411d1240335f820960b5c3","sha512":"7c7c1a59e6eec00ecd485e5083f69fe14783c7d5ea52962938682e6e8df25aef9bd88411e14790c1b6f8d938bb81502336d56823f23d4c4a187aef689b0702ea","ssdeep":"192:FbM9ll0weFl1zkMPgefBEALkLiqRd2s3cnNlsBRrUco7lcCSjyXR:SckMPgefBEA4LiqRd2s3cnNU5o5Oy","tlshash":"d7a23b0bb39a2b13b95d4d39b09b23f029952a1cf211c553a5ac92618cd2c7f059fbfd","first_seen":"2023-10-23T11:02:36Z","last_seen":"2026-05-30T16:59:35.30718Z","times_seen":783,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":20,"dns":4,"connect":1,"send":0,"wait":11,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3c42cddf3a8c34c6f72b4f3e9375c408\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":61,"dns":1,"connect":17,"send":0,"wait":20,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/18/83/64/188364361b0aab4b28a65420ac10c740/1755792839.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:23.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/18/83/64/188364361b0aab4b28a65420ac10c740/1755792839.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70578\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 21 Aug 2025 16:13:59 GMT\r\netag: \"68a745c7-113b2\"\r\nexpires: Sun, 04 Jan 2026 17:51:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70578,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2023:02:16 20:58:53], baseline, precision 8, 728x90, components 3","md5":"501557702358d2f370c93f85592938a5","sha1":"57b75e03083187d49c1fe8ab90c9dfaa492d8da1","sha256":"86ae24915e0c4259142a5299027057e4a9329dca6ca463944f7eff1f2b7dde8d","sha512":"71eead381352b51571bfaa018bebe824ff5023cb2a5d5a5fbd6e8381895b49cbc296ffb988512b2d3e97b432976af6c71646409c14f16b070d2bf8336ef3adea","ssdeep":"1536:ojAJjAN+1umJPQaRPZ0AYY2V8CJ2+7nXlnsBgJWOeGne2:dXmaRxns8CJpXKBCe2","tlshash":"de63bd18fa484e41eade753e48fcd542e7e34dd85c32250dbfacac152f20649ace85a7","first_seen":"2023-12-05T03:44:27Z","last_seen":"2026-05-19T05:44:05.91642Z","times_seen":312,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":66,"dns":21,"connect":19,"send":0,"wait":52,"receive":44,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0af00a3737696d67bc50123cbcb22305\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=17","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:23.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0af00a3737696d67bc50123cbcb22305\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=17 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 83f3e98227647b7ac5d355b3d09effec\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":284,"dns":1,"connect":93,"send":0,"wait":99,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/blog/drake-maye-stats-unpacking-his","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T17:51:20.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"montenews.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 22:21:00 GMT","end":"Thu, 05 Mar 2026 23:19:42 GMT"},"fingerprint":{"sha1":"94:51:B3:A4:E1:80:23:86:A5:48:4A:FB:AA:67:1A:5F:74:EB:80:23","sha256":"1E:BD:EF:CE:67:20:16:5F:4C:C0:1C:11:38:0E:AE:BC:4D:B8:90:0E:9F:E3:87:F8:A5:05:84:12:97:C7:6B:E9"}}},"request":{"raw":"GET /blog/drake-maye-stats-unpacking-his HTTP/1.1\r\nHost: www.montenews.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' https:;style-src 'self' 'unsafe-inline' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;img-src 'self' data: https:;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, same-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none, master-only\r\nx-xss-protection: 0, 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igyCcC3cqQdLUvaxKvuy0kYo%2BstjCHd1yrt%2F%2F%2FlaDBhc5gIXCVo9LCECQTsupgmZVKb4NP9n0AkHKgGodM4PAlqSXmqbD22YGi0J7rd2\"}]}\r\ncache-control: public, max-age=86400, s-maxage=86400, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b7c1a9b3902b4f9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]}],"data":{"size":34667,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6527), with CRLF, LF line terminators","md5":"8174abe3c441b0e6f4961fb7a192a0fb","sha1":"c58780b076222bed77c8060554ef9f558b366044","sha256":"d9e54ed95664994aa88a44bbb1bde3abd7b78f1044dc7cc9a30e1134240d255b","sha512":"8d99a98b51edd42cd51992badb31f6e769db6921f05b46532d2b7a9ca8fbbb66eb004bea77c082174c82506292ce2d55b3c92ef375c2f40b8e472d6ed9b6e8fa","ssdeep":"768:P2V4m/lMq4f4z4lNmKsqS4MfbMKcl2jNKubmMmNzPgkGcSLJax//:+gA8qRqZMTMKcwjNK4Jax//","tlshash":"5df2192796d1123a5533c1da65e873ddfb258017e34243a4b0af933e6f93da28133b98","first_seen":"2026-01-02T17:51:52.138965Z","last_seen":"2026-01-02T17:51:52.138965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":24,"dns":6,"connect":1,"send":0,"wait":762,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"montenews.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 22:21:00 GMT","end":"Thu, 05 Mar 2026 23:19:42 GMT"},"fingerprint":{"sha1":"94:51:B3:A4:E1:80:23:86:A5:48:4A:FB:AA:67:1A:5F:74:EB:80:23","sha256":"1E:BD:EF:CE:67:20:16:5F:4C:C0:1C:11:38:0E:AE:BC:4D:B8:90:0E:9F:E3:87:F8:A5:05:84:12:97:C7:6B:E9"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.montenews.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 02 Jan 2026 17:51:22 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9b7c1aa56feb712d-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3csa4%2BVE4%2FAcslwXlZWXivO9LJNI%2F2wYQNXddpUI%2BpAaIwMbP%2FM7QE7ssw1KmZSFAbsinOJBeIUg9RJgXUK61pK5UVo8%2BsK%2Bhnfx00yOTCH0GczEtgcADzUCYThiIJdmL8sg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=5210\u0026min_rtt=734\u0026rtt_var=5779\u0026sent=21\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=11346\u0026recv_bytes=1740\u0026delivery_rate=2914713\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=23015\u0026unsent_bytes=0\u0026cid=2284a4b04f14d4ea\u0026ts=874\u0026inflight_dur=33\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10462,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affirmshavebiology.com/ad99851379c793978eab9e0499eecc78/invoke.js","fqdn":"affirmshavebiology.com","domain":"affirmshavebiology.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:21.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"affirmshavebiology.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 08:13:13 GMT","end":"Sat, 14 Feb 2026 08:13:12 GMT"},"fingerprint":{"sha1":"05:09:2A:C0:8B:ED:3D:69:53:21:0B:3F:69:42:E9:52:A4:64:EA:A8","sha256":"9A:36:5E:7E:42:C8:F2:99:65:D6:1E:B3:8C:57:55:3F:F0:F7:A5:23:2C:E5:D4:57:AF:0E:FC:44:A8:CA:E6:CF"}}},"request":{"raw":"GET /ad99851379c793978eab9e0499eecc78/invoke.js HTTP/1.1\r\nHost: affirmshavebiology.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18557\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 7\r\nHost: affirmshavebiology.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6a23fc8086f467677735bcff11acf365\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46322), with no line terminators","md5":"c177586e75c26dc7750c5f766489bab4","sha1":"3efb1ae9bd9dfff08ebbb3cfdf6bfe346b51c743","sha256":"8f76e59f05f019bc545a87a1c7f3686a8d86de1a779c92503d76d5c2508c43e1","sha512":"e8232e3da0119e25aaef95fa4475448cb611795de991e43d3bb361d99fa4537506cea1d6161a9febb54197c3d5b8d85c6df8e404db6106cdb0f86d39452b8062","ssdeep":"768:dB2Ef/5+sNKlKMHLQTwkf0RZsYeLvLoK12G6FYc0CnWr:dB2E5+aMHLQTwkf0gLDLoK12tFYNOi","tlshash":"1b23fa5dbf92f006165f70b7372fa106b11a8c19680cd89cfa07fda46d68f05e837aa4","first_seen":"2026-01-02T17:51:52.140687Z","last_seen":"2026-01-09T22:26:54.715094Z","times_seen":2,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":325,"dns":46,"connect":92,"send":0,"wait":103,"receive":91,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"affirmshavebiology.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"affirmshavebiology.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 05fd5110ecc0170d1311fc2b7c140d77\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":310,"dns":14,"connect":93,"send":0,"wait":98,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/84/1c/e6/841ce61e23961d1a22f8b4bb57a97d0f.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /84/1c/e6/841ce61e23961d1a22f8b4bb57a97d0f.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 40068\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 270c9a43da88cc976a01799def43aa43\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"83bcdacf276d3f937ae8f30159220c5c","sha1":"048119c9d5b3a61bbe16ce3d3695a93dd3fbfd04","sha256":"e4462072e18b313275b6073c0e2b42205f12e19e790e46828ac4139a7898a6ed","sha512":"27c630dfd26d27e62a2e58738195980293127147c8093859f7d3320902e371ba6622241c9d405224b7c204112fad0363f3bd2a744415b03880f22347b769ddfb","ssdeep":"1536:T299TbVqfRjblFEvzOc+NxPXLZC8kvRQGntv7p4WKM4OLAZVCAFhuEQnX:KqJjblF2zOnC1JQGntTpU5onX","tlshash":"1db3d9987f01b05c07de703b252fb71bf55a1e59298cd6d4e107f8ab1a9c70be83a612","first_seen":"2026-01-02T17:51:52.142228Z","last_seen":"2026-01-02T17:51:52.142228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":110,"receive":93,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"montenews.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 22:21:00 GMT","end":"Thu, 05 Mar 2026 23:19:42 GMT"},"fingerprint":{"sha1":"94:51:B3:A4:E1:80:23:86:A5:48:4A:FB:AA:67:1A:5F:74:EB:80:23","sha256":"1E:BD:EF:CE:67:20:16:5F:4C:C0:1C:11:38:0E:AE:BC:4D:B8:90:0E:9F:E3:87:F8:A5:05:84:12:97:C7:6B:E9"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: www.montenews.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gI7Dy3Z7l68DMimxFg0iH9ngad%2BlVCvoApDScrZgJhhKs65x0pAz%2BZ3YxNWb80jKco95eADIueb08CqJOm1%2BdcJNuL33oTgOgpYBZBimwEcOW7ECiuRPj0CutWD2qLu7Xwdh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9b7c1aa5bff9712d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=4861\u0026min_rtt=734\u0026rtt_var=5031\u0026sent=23\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=12134\u0026recv_bytes=2051\u0026delivery_rate=2914713\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=23777\u0026unsent_bytes=0\u0026cid=2284a4b04f14d4ea\u0026ts=919\u0026inflight_dur=55\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10462,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10462), with no line terminators","md5":"c72ead343ef525780820a3b76f503882","sha1":"991ed565baec294455c3e885fcf60070eace10e7","sha256":"59d5338582995ffff0dee5ade0bdc802b5fb92d0c4224f0f8bb96d381a45dd68","sha512":"115fd221518c85f221a9f52e7aec5475dc655594f923dac50fd885916061215302308f9f1933e11c4720bee2bc4f0033f3fd58dd68e578c26c02458b86b78ef2","ssdeep":"192:dFIDO4LNMLpY5cOWOpkNxpvmZ7xpigpVmmEVIUvhBFb6OKQEVvGyHETVvH2RFXEj:dFIC4LNMLpY5ZWO6rt67x9bcVIQBhKdg","tlshash":"0a22f88eb58df0a00276557419b7e2c604a5afde34345f8e82019cf2fe6533446aefa8","first_seen":"2026-01-02T17:42:26.928081Z","last_seen":"2026-01-02T18:20:58.787088Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.montenews.me\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=9c4d5d20-2485-4553-9107-1250bee313e0:3:1; expires=Mon, 31 Dec 2035 17:51:22 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6b55f82672cec1d9e75d198e8f8955a6","sha1":"1caa2e04b775bf702348c164371f6bff0afc4c9c","sha256":"c9f8c2a8036acfc2f329b6d8138ad74d85afa796617d27179aa2c1eb003d072d","sha512":"4872e69b6385fb272d2c492d5cc90fac77eeb7cd1d3b15fc2cfb5cea7e57e0080c6b835c9e46c49055974036badfd302a37d5b4debecc9fd75c63d5e785591da","ssdeep":"","tlshash":"d89004031540c0454415d3733d501f45047300130d3074140143c0731153430444100f","first_seen":"2026-01-02T17:51:52.144336Z","last_seen":"2026-01-02T17:51:52.144336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":96,"dns":11,"connect":20,"send":0,"wait":22,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/0a/f0/0a/0af00a3737696d67bc50123cbcb22305.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /0a/f0/0a/0af00a3737696d67bc50123cbcb22305.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 40020\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 285d383126ebe71ce2188b965d7729fd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"212a8c246347a5e08eaa2cf770c99a04","sha1":"6754b2f4edd6cc4644b78a8c28ab5ff8c4728413","sha256":"b5e81834bc9624c2fcdd48d006e4d9a650579ef54dbb1a84df899070c753d2b6","sha512":"0c1fc62025c154cf59cf1acf64150cf73159e64c0c2eb8c7f29b25834a86984c0abbf30bf4ea5027989077a75189198d44c6f77fbf1ee80753bc3dae2322ea7f","ssdeep":"1536:TdzPoXVqfRjblFEvzOc+NxPXLZC8kvRQGntv7p4WKM4OLAZVCAFhuEQEX:eqJjblF2zOnC1JQGntTpU5oEX","tlshash":"40b3d9987f01b05c07de703b252fb71bf55a1e59298cd6d4e107f8ab1a9c70be83a612","first_seen":"2026-01-02T17:51:52.14541Z","last_seen":"2026-01-02T17:51:52.14541Z","times_seen":1,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":99,"receive":92,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/watch.548437293821.js?key=141a21b1910431caa239e90e0dce9c9a\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=9c4d5d20-2485-4553-9107-1250bee313e0%3A3%3A1\u0026shu=4a1e7b62e617ea68b501397ae2302f648474cdf968a4b250d8a90f5213e26587987b3d3b5a9d747b81a1ea9139c59d2273f6e23a9997bdaf102c6401080524f047e9e2e1551f539d439b7271dde2a213d09636d3a97968c3b80278\u0026pst=1767376342\u0026rmtc=t","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /watch.548437293821.js?key=141a21b1910431caa239e90e0dce9c9a\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=9c4d5d20-2485-4553-9107-1250bee313e0%3A3%3A1\u0026shu=4a1e7b62e617ea68b501397ae2302f648474cdf968a4b250d8a90f5213e26587987b3d3b5a9d747b81a1ea9139c59d2273f6e23a9997bdaf102c6401080524f047e9e2e1551f539d439b7271dde2a213d09636d3a97968c3b80278\u0026pst=1767376342\u0026rmtc=t HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.pubk9RyFa8e5ukJHuzTymLyPc-3eUMVk9YneCNp2gmg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 2370\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.montenews.me\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=9c4d5d20-2485-4553-9107-1250bee313e0:3:1; expires=Fri, 09 Jan 2026 17:51:22 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 03 Jan 2026 17:51:22 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 03 Jan 2026 17:51:22 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Sat, 03 Jan 2026 17:51:22 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Sat, 03 Jan 2026 17:51:22 GMT; path=/; secure; SameSite=None\nu_pl16606097=1; expires=Sat, 03 Jan 2026 17:51:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 33\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 537fc290e52743951460265e6113d890\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4737,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3861)","md5":"8a65d12f155d420a9cf61c3117b5f6ad","sha1":"7348b27cc030fc31977ef04444d402d5f317787b","sha256":"d3c6a64f74c4037c1e4c373bcadef91d85e6d7885f36bebb304d6837994d23a9","sha512":"45d4705be7d2aa2ff0b1bb063a1f5c0f52010cfd1d32a0ac8fe9590502827ae8bdb1465adf845e5af8b2994b686d6da86ad2f0b30f97ccc8441828a8292b9498","ssdeep":"96:oENHRozEWJp3XYZZV5AjBDgAk/eYZZV5AjBDgbO1ZDOGOCfMEDaH:oRzEQ4p5s3kpp5s+yVOGOCkCaH","tlshash":"91a10b9a6b997074346324bf43fe544c7e76044e9a08ae49b28ca5453b70fb41d3dee8","first_seen":"2026-01-02T17:51:52.146518Z","last_seen":"2026-01-02T17:51:52.146518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.651977194375.js?key=ad99851379c793978eab9e0499eecc78\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01%3A2%3A1\u0026shu=90c295c6742a8cc2059caeb948f4caaaeb3656818bc1db96f6fcb85867875d319010bab2ab784855a50c6f1a72aa327e2b7fb01885143e6ed9882b3756fb9f143c3efb6b926319cbe4b2bb4f021f148cc933f743611a769e23b118\u0026pst=1767376342\u0026rmtc=t","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /watch.651977194375.js?key=ad99851379c793978eab9e0499eecc78\u0026kw=%5B%22drake%22%2C%22maye%22%2C%22stats%22%2C%22unpacking%22%2C%22his%22%2C%22college%22%2C%22performance%22%5D\u0026refer=https%3A%2F%2Fwww.montenews.me%2Fblog%2Fdrake-maye-stats-unpacking-his\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=960b0633-c2cd-4ee8-884b-4f1ab101eb01%3A2%3A1\u0026shu=90c295c6742a8cc2059caeb948f4caaaeb3656818bc1db96f6fcb85867875d319010bab2ab784855a50c6f1a72aa327e2b7fb01885143e6ed9882b3756fb9f143c3efb6b926319cbe4b2bb4f021f148cc933f743611a769e23b118\u0026pst=1767376342\u0026rmtc=t HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoxNjYwNjExMCwiayI6ImFkOTk4NTEzNzljNzkzOTc4ZWFiOWUwNDk5ZWVjYzc4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNTU0NTgyLCJwaWQiOjMxNzQ1MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjo1LCJwdCI6NCwicGsiOiJnZHU5eHB2YyIsImNwa3MiOnsiMjgiOiI4NDFjZTYxZTIzOTYxZDFhMjJmOGI0YmI1N2E5N2QwZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiY3QiOnsiaWQiOjMxNDMyNDQsIm4iOiJPc2xvIn0sInJnIjp7ImlkIjoxODQ0LCJuIjoiT3NsbyBDb3VudHkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly93d3cubW9udGVuZXdzLm1lL2Jsb2cvZHJha2UtbWF5ZS1zdGF0cy11bnBhY2tpbmctaGlzIiwidHoiOjEsImFyIjpbXX19.AzUMxfvSd81OPBKN3WliK83emt6zCz0uvliwUuaB3eE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 3328\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.montenews.me\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=960b0633-c2cd-4ee8-884b-4f1ab101eb01:2:1; expires=Fri, 09 Jan 2026 17:51:23 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 03 Jan 2026 17:51:23 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 03 Jan 2026 17:51:23 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Sat, 03 Jan 2026 17:51:23 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Sat, 03 Jan 2026 17:51:23 GMT; path=/; secure; SameSite=None\nu_pl16606110=1; expires=Sat, 03 Jan 2026 17:51:23 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 24\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 03e9dcd4509a7ad3b5961bafa6424bef\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4625,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3749)","md5":"52eab5d46202d999b8782a3907e555ff","sha1":"2aadf4d8db5f29f71f1c41207b0bba95dcd62552","sha256":"e7aae5b20dfd70fc348b00fdb2302b803170435b83f520a0d50d24c7b26071d9","sha512":"c9bc5697b3d30ba09658d504055985530ef6e5f4ea284d0f3cf7fe3aa903bd887e45486c3b7909e15e6a9220a94f650bc903c643219ba3c237afb4ca9aa94f88","ssdeep":"96:0CozA5KJk0BmrBcYM5dRBfk/dle54nuveD9NbQ6lVXvw1ZDMCfMEDaH:QzdAuYMdRBkmvq9Nc63/oVMCkCaH","tlshash":"21914c655e96167ccc26747e313bb108b942c9091f01cc82bdacd681af306f8cdfaa9c","first_seen":"2026-01-02T17:51:52.147963Z","last_seen":"2026-01-02T17:51:52.147963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1STzYsdRRfGqyeTd_GKilF04-IuXKg4d6q6-qPKLMQxRoKTD5JIBFf11Tfl9O1qu7pvT2aVGJCAmwFBBEF6zp3JYAwSN-JGCHdcGRDmunEWmY3gPyBkF5A7GRg9i3OeU79aPKc49dlGs48oNGLvwlm3ZvNcLMZ93Hv1ii20a33v3OUewX18snfFFkl0src6S9XoTUKjPn6t955RK24xxARjgknvtK1M5lYXDyjY8i4nfY77UdgncQSr1X973wTgRQB6tI9OgNXTZ__MPgKrJlAM750yfqV25RvvDptc1K6Ckd7-oFgpXFvA8EhmVQBZsX14G5yfIvTVHLhi-3ACcKPN2QQg7RTNvfgQZLF9aBPkaOuJU5mDKUDqp6AdTcDkO2DFBJS7CVbvIgCl4dx5KIa3z7mqFdeeUDGjUzT_6G-w7RTNP3wBiuH3S7ld7V1yeVNbV3hYzTqwqxOwgwmUzQ7UawHYdgdU_SlY_RtafLQMxXDzvM8dWL33Ck-wxAmlCypUeiEyhi0wFsmFKCNCEkyMxOTgiWw2AeHnoPEBNDaAJgugKQMY6r1ehFmkiKBJxrVKcSSiSBuJOQsxFlyl0KgbYPU6qOo6lNV1WLFfTBF6fGc3PrFL9qFq7oO_uvcjxyrksUrSKBRMqRDHXAkjecSySAkhjKRJnDDCpCJa8iRLMiVZzJKUpbGmhGOCpZChkCmLWByLGKskIyINhaBhakKZZhITxmISUZMYzRkLJU3jJJM8IxFV1GQykTxMKOFKmkiGUkYZDklGIqYUpzRLI5oQItKEm5BKQhh4HYCvEYx0B61B0HoErUDQWgRtjaAddVs696HvbuvcN5Ic1vCw0m7s6sGG2HL1wBQIRLUOle42bfmJvwmqPjZey7weu1kSsu7GQupuo9xHzx0sxGP1DayYvZ7QnLOY0JSrlFOeMiMkNzji3BilUgbedmD9HAgfwJqdopd--hJKO0Xzf_wfpNgBn--Asi-DaI6DaMcUYxBXx2GMYa24N3TDyght676rBn3TgHYdlPU81NeCjXwfPT--eHnp_oGh5bM3wKgH6DBAVR2UVQcf218QDPJb44uuRZsXXevRD-fL2g7tmpht76Va1OZ_d94311pX6TOn_Pq3b6sZmMm7l42vl0WhbTHw6Lslq7WpTrtKGfTzGX_FyAuNv7rUVEVTLl945_SZYVkZ760rJiDsrvkVlJ2iZ_4aHfzL1z9_GlR5HXx55NI7BLJEkFsEuTk6F7ID_69eHukNfwsGVQCivgnFsINR1cEo70Dk6-CbY-O6rB689Ts9CJB5MJZ5hTZlXs243etl1IQKY5YmhLLMEBpplcUs4joRmFIDtZ_aD49__U8AAAD__9W8o-w1BQAA","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:23.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1STzYsdRRfGqyeTd_GKilF04-IuXKg4d6q6-qPKLMQxRoKTD5JIBFf11Tfl9O1qu7pvT2aVGJCAmwFBBEF6zp3JYAwSN-JGCHdcGRDmunEWmY3gPyBkF5A7GRg9i3OeU79aPKc49dlGs48oNGLvwlm3ZvNcLMZ93Hv1ii20a33v3OUewX18snfFFkl0src6S9XoTUKjPn6t955RK24xxARjgknvtK1M5lYXDyjY8i4nfY77UdgncQSr1X973wTgRQB6tI9OgNXTZ__MPgKrJlAM750yfqV25RvvDptc1K6Ckd7-oFgpXFvA8EhmVQBZsX14G5yfIvTVHLhi-3ACcKPN2QQg7RTNvfgQZLF9aBPkaOuJU5mDKUDqp6AdTcDkO2DFBJS7CVbvIgCl4dx5KIa3z7mqFdeeUDGjUzT_6G-w7RTNP3wBiuH3S7ld7V1yeVNbV3hYzTqwqxOwgwmUzQ7UawHYdgdU_SlY_RtafLQMxXDzvM8dWL33Ck-wxAmlCypUeiEyhi0wFsmFKCNCEkyMxOTgiWw2AeHnoPEBNDaAJgugKQMY6r1ehFmkiKBJxrVKcSSiSBuJOQsxFlyl0KgbYPU6qOo6lNV1WLFfTBF6fGc3PrFL9qFq7oO_uvcjxyrksUrSKBRMqRDHXAkjecSySAkhjKRJnDDCpCJa8iRLMiVZzJKUpbGmhGOCpZChkCmLWByLGKskIyINhaBhakKZZhITxmISUZMYzRkLJU3jJJM8IxFV1GQykTxMKOFKmkiGUkYZDklGIqYUpzRLI5oQItKEm5BKQhh4HYCvEYx0B61B0HoErUDQWgRtjaAddVs696HvbuvcN5Ic1vCw0m7s6sGG2HL1wBQIRLUOle42bfmJvwmqPjZey7weu1kSsu7GQupuo9xHzx0sxGP1DayYvZ7QnLOY0JSrlFOeMiMkNzji3BilUgbedmD9HAgfwJqdopd--hJKO0Xzf_wfpNgBn--Asi-DaI6DaMcUYxBXx2GMYa24N3TDyght676rBn3TgHYdlPU81NeCjXwfPT--eHnp_oGh5bM3wKgH6DBAVR2UVQcf218QDPJb44uuRZsXXevRD-fL2g7tmpht76Va1OZ_d94311pX6TOn_Pq3b6sZmMm7l42vl0WhbTHw6Lslq7WpTrtKGfTzGX_FyAuNv7rUVEVTLl945_SZYVkZ760rJiDsrvkVlJ2iZ_4aHfzL1z9_GlR5HXx55NI7BLJEkFsEuTk6F7ID_69eHukNfwsGVQCivgnFsINR1cEo70Dk6-CbY-O6rB689Ts9CJB5MJZ5hTZlXs243etl1IQKY5YmhLLMEBpplcUs4joRmFIDtZ_aD49__U8AAAD__9W8o-w1BQAA HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.AzUMxfvSd81OPBKN3WliK83emt6zCz0uvliwUuaB3eE; uid_id2=960b0633-c2cd-4ee8-884b-4f1ab101eb01:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl16606110=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0a1c0ae2c13a5036face3a78b7d4891f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.montenews.me/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.31017113554264664:1767374665:3KUoYA-OIPPg46z_Kqse3J5CT5OXQP8W_9nt71zNyj4/9b7c1a9b3902b4f9","fqdn":"www.montenews.me","domain":"montenews.me","tld":"me"},"ip":{"addr":"104.21.16.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"montenews.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 22:21:00 GMT","end":"Thu, 05 Mar 2026 23:19:42 GMT"},"fingerprint":{"sha1":"94:51:B3:A4:E1:80:23:86:A5:48:4A:FB:AA:67:1A:5F:74:EB:80:23","sha256":"1E:BD:EF:CE:67:20:16:5F:4C:C0:1C:11:38:0E:AE:BC:4D:B8:90:0E:9F:E3:87:F8:A5:05:84:12:97:C7:6B:E9"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.31017113554264664:1767374665:3KUoYA-OIPPg46z_Kqse3J5CT5OXQP8W_9nt71zNyj4/9b7c1a9b3902b4f9 HTTP/1.1\r\nHost: www.montenews.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12204\r\nOrigin: https://www.montenews.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.montenews.me/blog/drake-maye-stats-unpacking-his\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12204,"data":"ReCVrG1I5oXO1OOXo51o4a4X43p4394O4WTg4-95o17462gVK2CXO1KgtoV19gOH42oWVXa40kbI84Y2b084g8Gpo04RKyf24aZV5dgXSQRff4aHLyDwFxRg4gh+yJ5gtoCX3fTWN94RqZ+JHKe4u$2uFheVdMen4+H1ZgzbFf3G0Y3GBV48H$9ZWMWo45v0tihZB$yDpZH+D45S641x4++3+VXTEI26CgkEd0YsfgtkcZ7xx458Z44xqYzYOAiN241cXqaMRaeg44v0pBX5C45lDR1hCiTG43eu7hr7idaGx41TZ34u6iK8l2SiX9uV4HWpf4kR344oTcZpf43V7TVlJVV18b-4nDG-V4f0dwsZejC9V5hJobUiSC0lKUTKf5lTbxRJWfpYifH+pb61xiaDz-k914gzGO0ihc4g+jAjew3gA44jWj8WFBMcpMoljqQMukKHVXG4v4P3zlky$BbDC++H4raJFtGbPTOZkD6KBYQzYsGJPTfNkQYlF2B-4bgrZQCp093ectg446WRVqvIPbDKXHRkl+pHiMEHYu1YBrY1I+5sVy$Sdk+HolsTRUCRW-MZ+yHqr+$-Nv5c26tJ6qE6Vxv9ILUCyB+zrZR4gy2I9hrsGMCDTCGPh4kY$PQH5vCavMql1u0e$Eu7DgL4KHqq6D1S3iGrX-aKyIptx4QNGBrann-3VFO$SdQIVckYOvkw4cnPbT0gVY+1i8i0519kgRE6JJZLpfR0wSkYHrbp6H9kJ3z7f7auRVCoVGdj41AUNfXpZpA1HCpfMFh-Lc964dY$UV91o19W1IiIo4isf1+oIbrXc1RcUDsbZXg5H9XTqfn5HRNYM9fpSicovRdcC-Y5Gs9h3FqVx5C1H4Gu1HD5GrVG3a4Ch3go1vMgFfp5PXsIdIQV9dFcf-YDJzs+40FCYCof9OGw-VN4YvAMgs9qjOvrcNpf8lzgxfaN43-4$lQeLBun-xXCq-BVGcvJhH5TvUeA1fBgdpBMg1hSvu2Kf1JGv+puCQFN9dh+N39QI3P$guNC3VuzpTVuhg9KGHp0JvpJ7+X1uKJq1JwZwTGNhDETzGpCfq-J5exf$BFMJEBFx-HDOM7wpHf8TWPXenDJPpRElV1d3Vqr46vy4p3gpX95V8dIsp4vF+eugpldFqpbdLz30d9ZzZVx5SYrBXXCV85pq-VEFLe5J+7yqM+uWTslKVh5Co1--eLWL4HsPJOesPT1nO1GG+cf1TvSTGXzhz+QIs+SGgHV7GgTtfzHvUYz6$1LXbOdvjxr99XGv3-gT17UGSCCvfeo4EWTR995CtF-E3x-F6jFbRiPiFYijogCHftQiocg9IIp+h9hXO4-lDuaMfeFf+X4iFgDDA4vPHQ9RxFq-u-xwfcPnGVgy4CKtacq-whc0gyjsj4DJugpI5kHpB5g+Dxs9g0E5c0FE4xKDUuQWtpnKMVVWdA4w$egbR5xJq8lj1zyGtksk8tOM+Ptj0aajT0Jd5oDMq-iq8sJj48UaowLu$vUViilfL3$pzd7$w-MJ-vwrLqO1$ewKVooOp$V4C$$HF1IV9X9XEXwznRLiF0AtiCa1BIW1TbVJVj4EOE1wc9F471l5oeVdSzeaFMLY4JkFro1Dh0HVzbRV4RfeTCxGnpapP4JR-tUD1TzjzFd-w-v56v+kTB3-9-paHocONt+a2OTz0RWEFF-lC85T69gWIfpopT+5C3CP1AbszG56$Hd8-6k9AUo1eQVv6QVU6DR$6HvNUrrMgCewel6t3aR8B2F9b5zyxoMXe88c+L1S3TRoQCsp7Zed1+50+D19Bfrbdda+0+G36Uhj$++SfaGP3F3jp+C4IBZrCC0epWf333jlifaSJICYvTGXjeHHVypVXApKIv0f0peXSGT3V60h4nCp5Ysa0fq5faGU4rVqcuJxY5fg7CxCQrvt0j-T-tYLXzd+O9F-UMQC69kWZt4n9Y4R5YpkP800GHM0l4-rCOIygraPY9aeB2gBrrXa21H78-49VQd53V5CDVQ6g1ufJv6Pj43Mf1P5GNjh0I09HRTTQeFlDVleDfuvI$a+8YX7axjugCz4b4h2rNjD9DH0tgoHf--cSfrhEoyNdq-sRGJo23qH3g7EHY6fg+soVxcfl6ahxjtyK-ufPB+-4TkU06sBv0+By+od8whCLwjRM1tIpykIqTnR0pu8+bkBJwaAOhSGxbN008GGPQ5EzP6IhDPQ1gWfJ1g5xaG6b75hMOHxDEPDUp$t6asHFr-IsWMrry6-UDkTHVGKnpMtyOO9UYASNA4Z$biUA5XIg$bHOsM7+o33Cz30aUbEZU4ZS-N10CMBUXxZD1X-0kg+Cx-pLTkZ69iTuB--VSd3aa39kP2cG5vgruSMLTfPMHGDcrPKTok0zoa26VC8OSM-k6upgbcfM50F0CxEeTVFV4no0+cF4fXQ+FoWsBIJhWNEgdP7CN52TE+wNTkZ-QX-P8piCAy+lFPW+o5bF9vQaAMbHd2J3l8W+w1aU0Ch-uU6svLFYFBHpvp0z3xUA437r+VXX1KRSHVLke4if5w-vV84fYDYFHVJlD6oY4CIXh+oVcITesetyB7uoCkTGTMvQYBRScZh3AyvP45TFRkBXv4aCGgdX-ewCfaO2LyohK-MnscxyuVC0NA7I5HVWrja3G2dj2XDkW5IS9wczHw70hn0ZWR3Ci4WTo8SJQYHYVaeuirM0KoAjG11XtQuv6x+E+qPT0ShgKQBaMPwseQPcNB15sF7VJzOTgopUgX-HD63WXq37WupObcVGdETWFaf7Rr7Y4MJc-edoCkjSQt-jrlT51wUgCEaRifSzKiujZj4EKPGO18guEr16hhD$Fju5NX7lUdSiOThvb-ujOgcnMsGsOv5dzlxeT-2X$1+F32j2YTdlZKP2NWzVnInbk$1j3SF9pU5JZRNus9tbEXMIU-e1-HWKRyT8dOXp5+7jstpFOLLGQKoPhMX5sG9pSQBzc5fO3RAvV+K4dL1-CfB1eg$hIS8z23JZZHRI$25h$a-lOwgGv6PosHuj9HYn0Rf12-0rc7SbBO21+FuGBW0-PoU5SyMLsRgapeX8Qc8E+ploeJxj0j6UFv--pxDTlSqdMEoEnqc9ZNTSWybtpYfe9VqdE-fAfKklQ1MUDaP-wzA80JGzPBPBUfR-k5CIhC$lOK-ozT-u0bZrYd+o5ghskuEgfD3xO802-R17SiHgcfw-utZ11f+GMNMAoflMTlYKAe0AAUGzM84sr0VzR5-Jzave$jp3jJcCFr1vPgAOkDCZKi4Skc8Qjc7DzzqY5DfRH90-AqXj08XQlEJM7sjgh7u5iNgd2WohTZ7z2k1JTTz9rJGDHJZoge+F7elbbZQDL9CW8LGoexG1j2XZVhEp1wfxGh7-xD95HdygajCKBKM9puTOE2Bw9E3jRebgyL8LCfZEdk+oY1ryBM4F90h1lC9ubZ2cns3ML1lCdkU47F20D0398OZovuUoa6wIPMM9bo+O84FZ+4T1Vfpoq+ZkFoGEaV8Euy7pdpcRoRG5GjJEUfVowLrC1OaEnvG6P0CvppnHGytzUpMF5OfywkUVWVQuhv7HsgVz-XxLC-74U4UIVkgL30gfb6+03zT4j0pz7sQ+dsZVG42F-Vi1V--LSZGuR0F0v1n1BFqCU5pk+RoR0XDXbZVX3uT5HXvoyg1OfuR53pMMfVoHhOE5tHNc0LgOPFe-Uu+gp+9sCM$CYF9uObGkU+X-9L9fxjD1evKo2L8FrL0IpkSkkC5MHs+6WcLz3FF-bIvywsPMfLQItXNE4ueXqMNX55yeG1vXC-ZoIMCb-NHL4uTNWOvGN6JCjp8FD451nG6jFG6oIo39t5AXBki5-13zbfZg9of08fPNnI2Xt+MbdpToCvSgA0WVzOpNiyksQZ7ZD4dLUL-ctuEjB0yv7g-6fVbLNo+u5v-fB4CE8Z0O4LCjv-h62GpkapZ1hIc5cOl4jEBul+ykKIzG3VIEVY0ow6GeDgY1Ku6+HezIwR--KZnEKRZps1CMqMF5pL0vqs3YijUg--UEKo+kOp04iGWuE1$NbOhH84tX$+q+nEwI+L3ZLVB4v4OZWEwIR0UChHPFLGR0QjC-LGIj5LzyDPyEIj6yA1uy4XHfjcasPHxYnPG4T4NeWGDs--uNA4ffqMBzaOp1BzUgSF3EpYhHOGz1$V1ZqoYon-jeD4B4Wp3jJzqMD0kbk+IXU95kpo9o6uD4kulC1Of0-PSYCjf-q4quCfqsSzkbcH51Vss4nvp13gNVZEqP81aGuuh4WoqVaePZGuIMBzQVh1RR7G1H7PPPbEV21N$jg2vP9RSVD4l1o82ES01XDYMc8e5R$p-HsEdpLEqV-L3Fwv$P94Oyy1ry38MkK5fMbu5Pp+p2QC9Ly0D1eLl6aVjgC-MO-2MM9pPIKLfCU8FkeYHYOVtVov-HK2-0DRkXzoHN6jhOOsUug8BL8Rxz7MAV1Eg0b138pPq2j5CfnNYPg-BOE40PPz$V54AuCkGVe5h5OR$2gGcLwuq88-S4MblClN$8Qu7u8r-HaNWFNMG24I886eT89sv2X-5FE4Ncf6svN1J+X-koUgX58NYZrHbvz8-TTu9rkGRMMRryQ6lsRNap+rJ1x1E1EYzMhPvywEpHu4aj8MwsCTe5UHp+aNyTvV8ep5DHfXEF8eb2I0-4ffh4aFdrqLk0U47L+rqOGMbGl1+2jPGjLudIJFbMNuheZeRZ7vBPaTVPBX6gHfjyxoLGPEDHj2fjPXzMH2KRwcF-2Cx1KCcLPHFsSpQVypL1PL7oI6d6QL$4bXS8CIW+srQvqjHOUcBIZyYcBKdo2ztC$LirEjOpTou1CuCgMrCfDu9YyzL1ENAX-fNeoHCkNX0MKoir2PLHVcO9u-$4D4JRy4g5jkbF1OnKUcf-yVjeooCHxNCMOpT4grwOZ8w0EFVVfyQ0KZ92nIjOqNLsI4oh5HkcuPKeipOV9jeH54UN0c1E0pTpB1BTeH3KO6w+lOHpSr4P3p2LzY-KzjbrZN$8IM38wcjheXaNeC-pFPjh8ynu7ZhQ0KCNyHDOBQMFEj5c56aGyv14DOwrd2XKVfMZnGnbELE1CJf0fVtRChoMJEbPwCSGGjv-uVz6JT-z4eGj5J1TlYt+lhIogZ7MDkw+VJ$+cpt+A4HH7O3c7IG1LuJZtTtIMh-G7JtXc2EQGg$p1MaL18xP2h8ef6c6MZ3TuTf6VKMNNI9usOv4E4y88QxGpuqubRJ4b4fVvpWKOVPCkhiKXfLRQkX-GYPefesPVrKROVjNhr8GgZU4bNzjL8RMKo1pwk4oG4n5G2RL421GY4fNQsQ0leWpbKSgJ+AFN2ZKNo70o6JPTXaG1ODjSy$ooNOpjcwkYkN5gQbIoJfPoPHTcEJO-p9hl43oLVRI-8bForLYdkpznecKHhr5JZeK4kUy+6iLR1+6QJBjGKJCuZqXGgyHyYGLPuMexsj8wIHh8pQvMsECfO$JHVW-t-UPHY40g-H5J1-cTedHE1ry9NzRDueGs5dPqLSZLQtVINdPPcePuTxPBOHfQYzOCcQl2IbRJOhLO0EK42qMT7gZZVaeqKXhTdUCv-Fl5T9u-Yy1PgqCATffjy6j$povhyYcipvM0vdufeXNYchN3ySLSGcPPZWJbXL4c6f3sFJ1Z53KJO+8l1CQD05vx0kFgPcHHs$2gu9YwGfyUpUViVyRMZGuJ7OFcz-Fz4q3ZsrIq2-fGP9fKoR6thv4-0dv3jLNwcu-Cj9b63Ll-44lJ+UL+dA4jy3F$jr5HpLVCRsOtXQdQVg-n62JwNtgfy32dGDpx8VdoJ6QGgIMO7TJ480huQJQlJyM57IpE1s4ZRNrUs481dCg85PhpKtE7uUcQkjLBkUko8P8Vsxr-Ijype1OFIeILz5OR6whQcLGO8285HpBs4L1ErRYUscHB1CYhTIj8-sK$8Gvyeh1NHpVWXflgZMZN5Cz$MN5O7+3I2OpDREIzkB8cN3ZGuU7YczXB+E5r15el8hXT1J5qVckOzZ1pFxeqT0H$oddV8tPu7YRk9S+7Brot4wE$8xX3-Nl$+D1s5xQ$Ml7CMiL8Tur7756coRZaEfpz3x-ZG1rwRSZMGgEO3b32Wy4rBfW18cQp4-lY1irKTxBNMnJzHMvCTWrYcSlalPFgU1OaNO6hTFI9bqBhEL1H3T1ylFysYrPXYJTTKUUhl9oathrQ6PdXJ$Tzcee9ylBzkpzhuavE41EQ05lTo1uUJuJRt1JuozrP7$OjKY6UV1OM0vjZMf41BeKJ+jvycT8hBcLSFaEL0-5EP3QOuT5yHdVWV351dGpS+QP6ILYg7CM5B3VwTYsdra7V85Gu7bdG73JXPr83V5o5HzPSo7klNnWlceckBxT-sT88fvIsMJ2V8bTwlIJhSSXhurNdJi0uE1ePFW7s02vf4X3Y1tJFXGQf4Vp6sKRZPJ1lLirzs--BkPIaHU1MsS+83UC7VSKcR$VXJklFfMdoSWptjV7TP5lhtyQGBU1Q1S8TAKjxV-pt+H-VJDki4yJVAO6d59WQTKLR1rBc3odWFOdrynoB0SOF8bsN4ZVY4qKGuBdO0O7JdRAs6DWyRUQFSMHpJHaGlPe187Jf6nQp4F2PskCqMFkZziCRN1EDlxQATl17M5AZ5ffvsi+cPL0Kj27ZUKBq852nXirXLJcOAZSZoBkX1GLg0G1pg3yvVL3D5J0XYKP$GuoB01dMjEiVei8F839oRBV9OS+gWFTPLrdB4CKU5JA2Aci6e5hGjbWtGdZ2JA3lWaGg810p0jBMdvM55CiXdNRFlrYbQcs6jZRaQHAarYLYZPzqV1uv1RlSBHpJ6t6gZcpY22O5HErZR4U+W1hWf0WPpN4B$8YGgRYQHs27u9$iUVitpCTIIus1URllagTvP28a0RKbM+MTkoS1B8f98y4RLXi4heH9ubWqMDtdIKSCc5FLpSZ-UPrj7ApFjulqJn6VKkoZr$2$TyiqBiExcDkOBg5ipOeHV$jsC1rb3pTNk32L1D32FesiC6HNtw5kbhK+65XqWhrYJVpxdwCi3Xob1qIrAgAoNcprSKlH07FR0$txEQMerGW25xt6gdVNSIxhMwP658julWRA18djJb6Pt0f3aaiUeGqNiPxQDVguR2UWVlzTlz41TF-Q+MCbxPuclbDHVQhz4EXtRWYw22dRun95lz$IIX2$oe6-WOck5C-ZoILU+HokHftD-6vqg2PMaHuBT3b017i8hOtNhjV1Ea8+ZZYv4zY3Ivsrev-$4z4Vvi+R7liuA6aAEkiq+8hZgsisMkcWxh4t5nkSvvdZ3ovydqVLSFhWVaEx8YAxzMcY8l838zk7tGL38Eo5HC65vBB9Bkc-B4A1M3Bfexjnjzk0T4qPv85fYaG5QUnDnQx-1jJxVzUAiWuiaSjGTpcK3eiiy+0t5bnVkiYg5yNOVrT+w+EUJ5Jg2Doyx909$PMriMBz4JG1X5KCMZJW+85+PVpgwAVIkGGJiKoKn$3-fRv6GFB1H3GoiFKegl4KkIa$j-K5IUcY4gHHO4jRMHdJ18stFai+bM5Ps+-jhIvGdUiH12J1FaD$5-9asYFPVc9B9t5raccU-c5uTF8z1GI4JvoOu0XE5$DiAL9Q4dVz4Pgh64SXPHhoZPXDgiBaeQ1jHa$6liH4S5ebZSsrRpNtM94Q41Vtlo4TIfo5MCZ1l9o-5LX6HC99oOVu2DXgJHfzz1005-xjdlYhf98cV6IWEBcgX9yg+VFfav4Ope4539EZ-xO1RNd49PI1F7V53Pps+p4r0gGMHX1vgpVpOJ0C6Cd5zVkc-W-TC0rAy8bXgg$jPC0a3GdueUHjoCj1QzX2UF4-1-2sHji834jpCX4lgXpY9Kz5TpA0+MotNh3gZdHX-UHF5dhgHX-cl4yS+Vr494VGFay+HxO401M49499jH-RBJgi-Ln-egHUDp3T-M5Oc9uuhozgXY0+l$HgH-Vkw1CRhTT9c-1vbXPSM65U9nH0IRIVW5GuP-KCPjoJPbXop$HC8+yUTzjjG-Lg4qrFWU4q57F79zexO1HN54CxvaCjTcWPGyfWHV-LFdNdU--NE5wVO-0P1p3RIWHSpUhpYkOpCGvoTCEHsHfzbFNH5ICMl+cgBeAH5H1CSgJG+xVHe$po0iMHG8IGp-G-49ap1s8T34pvFn-eT41fNpf-4-sCvz3oNydK1UjsOFEXe1fKoGUVRn63aTCM9LFp9HHvNgI4o9CL-fHV7NV29xf4NSF94KFFbV28U-8FTc5Rja3f3vf58J85jUtB9dO9u8iBCCxj4Ed3IG-VCAdHIiIX1OG-IVu3alio3VNFcbHpHTJRL1vf7p-FjoFliJ-QIKj8-AIM-XB5oyv1I9883CY41+GVbg9koUZ4b8ZG9Bb-7of24rvyGyn4CrzaD4npXpD4zFhgJozO3Tg549Cx-+bdTgEXo0ZDqFfc+J3+5hnx4-Kh3RoFHEq-800dvpB334GUGYFEsoToo5jvs8lE46MUTe4kN+bCCQcPSVNrof3bJeHIToXhpQGBbfC+I1F6lfsfuptOC$iBiU1+b780CFF6O85Ze4ObNj+Gz0TA-x-93n-$XXUBz384h4K4Ul+CSONxO4-qeV569X1vZ0WV7GCIgWze7NXBc0gKe-HXVZnEQ4lewIUoN-MM94-60rThW1UCOHg9q9au3CX9Xu1L4NFyd$+bcpPI-pnV6igMWpVNbcjg3UG4g1o4Cy$o2gVldXdEfhfM89VdGQVd0Nx1p+C4dFvM6cfz+++l$XD328R7BbxjcC1Vj0SHvovMUfrP0fC3ZlayL4X9scWV4ie7jhFDq5HiaArTQoHHNgGtdkj1e31duQ9x-+TGvN3cOUdVQYrvpnVaZrC7HL4D-C-rw4OT0-fG65fOz+-IU-VFHzfic444vYHg8zFzU1bxylt6i9gEg6HfgkE54NC2g1ICMDSMTBzIp2V8XcVkG5bReit5geq+D8Q-xIGp1CXE1eZ+LKarhj0gcUR1Tt59VO3Q1ESotdhF0ghFw4p44ceHv7YJBYuYUpVLFTWMF4LYh+ZECITzo73XXFcBdtcasf5eJZSfk4qIhlTPvgplF--F0Z5zrN+Nq-20yLKnoo12PG-1TF0IyGIN5NQV4E+J4q8+4H9547oF0sU+3-iPE0Niap4LroHcESpi9Tg1J-nWYvkx4CY8zhrTMAPuo9HHg551QzXpKCxGaXhDTpzo1iCtPQ3qjaAd81vbscB84W8+MgpIZOC5B-BXX1T-8PbAPFryX-ya1X4K-1d5dW+dx5o5z4ZOZ1bdV4pn4Gcg-4hRL4X4yfC9CHTlCO56oY-R4JeiI5Tf4Htvxcf-4BdhH5-TbZIP8rI1GyR4HPaOWsprXGl$ZhTpOBrD23jhB2rCM4XBqMgoGGXzBD4P8iv1dGU-ECaj1S-EXBXTfdVZOzS-DoI5fsNl2OkG59zO3tbrCko5aQH5u1iOXa0IkHh65NB7ZwZKgReJdCON4HSjKgpSfZ5e5f2UCFoiFTBN2jp8-4aObVr7C5F68tHiJ1SISiuG6NJyNIDLM26XBE2FHEbXDYSGNpD8lyP-rYNlfQjW03y7g+r5ton9a2C-KBrBQtoc5A1ND7O7yR29sB34HDHI99XK4O4a8fO0V5VZy0Op78O0PVSDt$RDVa8EJMuH7V6ztBp8EJ10dL43fRNt8z4-uhC+Z5J1$jXyXOKnUC3pXJ2B4quETzfBYM4rRxneAnZKAMGk2VzqIh1Un-$Bp2lCuzd2+Zgj5p9dZjVRuMVKMTerv4+nUDPy3NfBedZw48xqZoOGzuiy24sh1C6XMr4fHX5O8V$CsWgLROb0RBrEGj4i1XO1O7ihCzVZOTOVU11TKtrCjqH3zP+5pU4hclweMyD81qdQXFUjeJbXOu3JCzDVhg9zw70Nz51j0a23C9BofQvcEd$2pzMHbB4FEXWh-nefls1Pha6N0b0FU5bbPF1wBp8SFb9g9gVhC6DrQC0I6bseKNjcT$z1Bx1Ze$u04rnyFPyUzAr4tbkvjwGubgWW$jx-jM9PM+08RXjX4pZgHWHRFEV0E4uMCOEFQF3Qpx8FbFIBB3VH7p6rUzHIMVaspg98znzYPSIKOpRNX2eS6lo1OevweSruhNo1vQtiCl7C93rO-nIvMl0jb2z8524O2thtR2rCioK4OlBJUUfqpX2oX5OHUtKTaMI8SDJOKEpNTG5CPZZx0OT9S2uV+Vz83yzXBMbLjrJPDX-Ox0THV06ucaF5CC5zrrCY4Q-3F855wTVzKYo1ZMU6vZ4OuXOhVaggpBp8wM1kYbqygQz2Lcz+crlZ-ru0MztOF5cFX7p+pGeUI5GpJZ-$1ro156gCZOJCdb6B886W8SDFi3GbbLrCC3RJ47oZtL04ePIraJ8KWBeYECW5Ke6-hPhLedHpPVg4dTxUiPpCQ9RGTICM0s9QMxGQXjyX1z8h$pQgXGR5XqlCVfpY5ve6Z3zjHkb6l9sS0Jvl4B4TM-e1bIgEBjBhQ61BUJZJDU3BKQunYYh6EpR608QBSh+cJ-RL1x1oo$8oOqeHf71KkV+PM3D3$zW52+ZBVIRYQibZgVtZv34UJlHLjVNK6dI3VX7RYW+KB4Q8cFa$irjTKHyx5KRUUDj5b2J42VqRqJ$YMn8lk3IVk6W+MtSbFusJOH+qzrtz8jysJjEJl$j168ukUJkDqBEQjNTz6glV2aav7YbrZkP-5+-JEQBdTvkHucsxi++NkhZyBrTgxIOtWyh50suVkIUEkUQrQujGisU9zp-xTX6bucp6B$ijR9z6LTMLYqCXNLIX6Xun-gwai6$hAytPOLx4DwjCzwpWu2tEg$2t4rykUJe1Z4EVA-T1ke3EujDH6t4rqz5hM16j4s3DhozuhAX-E4R-3hCynJGaF-H6tgrne7XrRx-K70cJv3-3DpUxT2UoTIR68zpIAC6tOT3Dt5EIK9OArLXt6wuHfPbvgtjJpRS4wRIC3j6cJX6IG8M6+h064QaOONYNJlHc6JTpb5hAffzWK63ri80B74JDHjSUrgyvIKRQFDgv5KCD8PbA3bvOA1rQkz3wbfpE9AnreRb3wbY4DIA1r0RQBe+Z1h2UbTY4o3VkFjD5ADvDfGeKLxjHGkZrHEJ3evxJKTtkKIM8UHHolKY0S8hMwPn2xchP8YKt6nUjBzO$UjTKGENoF2Yc$36Qh7RnJcyU4cTA6J2ME5Hzi6h36avJC-3eyqOHTkhQsMz4RZf6OSUErab4SHQ60hhAo4xEXUjBgkOD6ZJ3T+VRuQhOj5Ifbp6eEQsEaw+MNfV$5cW+yjFXGQN4QP-7f2BqhnVM9E93j0PXQtlgC45FFHRI1T6bKiTReNQToz-HQ47Hw44wvx9kz28RVzjquP9VfgTQ$1MjXsWsiPAbh4s0CBRYezxkVln6keKEpc48NjGg9rVJZoCgV441lidqf5+SQ4iabVxGoCzlWt1rZ27gcafX$19CzCJGJeTHj0V+pZcpVrQRIdZAJ+DC5FoPNBH44gI9s4i45b49+KV39X8aegWCBp4DLp3hzf13drGe-E9PC-vXTWBCR9GDlOUKE95+pkVB44t-44vq4Re44+-PlMst4fHOk-YXB1B4PgPAQFr44gvZsr-xttN$kS3lNsLDGVIC4zSFV1sne4A-43e1sLDB13dKB5fl1sTO34gVXE43l2s4DKLCN5H1e704B4qIzWh2c57bgH9rPdoXbA-4gL1D8AUnPC5Lb-j5F6iJ91CWh1$EtVdY+E-Y5J444E3P5P3T7wMUV-zfDzQAo4aLW-Q4oZ37SY9nLv91o+-ggVo1wM74g5XVPd5QYJ1lV805Jgf-teAxpGg51Z1qzx-$05FU033XQS0-0C+IGHOKXkdzXflj--lIdoyVDChH6I1o3SKbcD43VDOdqJYEzNHuY-fanG5YD1fjlTsMog5asPS534Y-v9rwPX$7Se4OLxaAG1WEeN94VLO4P4CB3V5-1048gtczYC9b6fKCBaA4g5VyAXYYbyCj5C5tAreNG+e-IcrI4lpJ1B411D4844oju4puyHXVblDTGcdI4yH0FJh$UN98U15F44oYrlc5CgT70tBQ-BpOs+fqdFYD+kR4VXK5g4lCXbSo1HcxabDPRNQkQ4eBQxKYGIXQk4v+4Go0R3AvGjVfeFFVsb3I445nYpH44"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 17:51:22 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9b7c1aa6e807712d-OSL\r\ncf-chl-out-s: tlSCViSdVL+322KoUfokSQ==$mcR42bWs02GM/PAwIc9lYg==\r\nset-cookie: cf_clearance=aWUtgSKZhzpJCf.ksThcReHOzrz_rENPUUddzDvAc1g-1767376282-1.2.1.1-651K1hVf0DGjNjzMModMHyQAd5xBpbJ4jh5u_lEXR30ZZTjA9LrEokL5BR9Y6XBBBD1jx9NvU_oP3etVLhXAZINvxO0k5hadBEVbrk2osHNlQCPdJZ4Jp5RkgJnZuDyBWH37rWMbcSpOoIONev.CYGRJebNBt.RPNTfodtYoqzh.9Ppqjbm5gEMDCR9Y3yV6wDl7P9_gUWFna4eo3OaXyzq0u5y5sMHUPy39L1mv5QY; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=montenews.me; Expires=Sat, 02 Jan 2027 17:51:22 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KZbyBs7crDov46wvzbLkPmPaEJpc%2F0gxJVXg3zr6eJ3RVOymmAI9ON5UvFNwBbZ2i0x0qeh%2FpgpURtgwz30CasgfcZRojukXAbHilzxJfc5hFMWiYgjArVYBzuX%2Bd%2FG58Ec3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3911\u0026min_rtt=734\u0026rtt_var=4480\u0026sent=40\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=18230\u0026recv_bytes=15143\u0026delivery_rate=7771416\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=25711\u0026unsent_bytes=0\u0026cid=2284a4b04f14d4ea\u0026ts=1112\u0026inflight_dur=57\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:22.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c8f0616a411f9665261413575429d8ea\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-31T05:11:33.088947Z","times_seen":17410,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":61,"dns":1,"connect":20,"send":0,"wait":26,"receive":20,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/impr.gif?sid=H4sIAAAAAAAC_1STzYtcRRfGq5N534UuxEQMiIsGXSg4PfV1P8osxDFGgjEJSSSCuKiv2ynn9q3rrXv7TmYVDUjAzYgg4urO6UkGY5C4ETdC6HEXEKbdOIvMxj9ByEIISE8GRs_inOfUrxbPKU59vtHsIQaN3L3wnl9zeS6XogHuv3LFFca3oX_ucp_gAT7Zv-KKmJ_sr85TNX6dMD7Ar_bfsXrFL1FMMCaY9E-7ymZ-dWmfgivvCjIQeMDpgEQcVqv_9qHpQZA9MOM9dAycmT3zZ_YhOD2FYnTvlA0rtS9fe3vU5LL2FYzN1vvFSuHbAkaHMqt6kBVbB7fBhxlC3xwBX2wdTAB-vDmfAJSboSPPPwRVbB3YBDW-9cSpysEWoMzT0I6nYPNtcHIK2t8AZ3YQgDZw7jwUo9vnfNXKa0-onNMZWnj0F7h2hhYePgfF6Ifl3K32L_m8qZ0vAqxmHbjVKbjhFMpmG-q1Hrh2G3T9GTjzG1p6dBaK0eb5kHtwZvdlobmJDMWLlKfRIo8itigIThYJjbCylhFm8f4TuWwKMhyFJvSgcT1osh40ZQ9GZrfPcco1kSzOhNEJ5pJzYxUWKcVYCp1Aoz8FZ9ZBV9ehrK7DivtqhtDjOzvRsR2yB1VzH8LV3Z-4JDZRMbUxSayMUxVhwkQiLWWYZjFPecK1yUScSq5ohE0qBc4iSpilcZQmIk0UM0xFUpiEJyolklgpCBM6EobShGWxpUwKIRJlZEYw1THHBKc4ojzDPLHCUkuiiGQRE4YzoRKaEGMslZQwg0XMYsOkSEScaqZSTJMUgulBqBGMTQetRdAGBK1E0DoEbY2gHXe3TB5o6G6bPDSKHFR6UFk38fVwQ97y9dAWCGS1DpXpNl35SbgBuj46WcuCmfh5kqruJlKZbqPcQ8_uL8Rj_SWs2N0-4URSooggmDOipaRMWIEtNtoKLSQE14ELR0CGHqy5GTrx89dQuhla-OMpUHIbQr4N2r0IsjkBsp0kNAV5FQSGteLeyI8qK42rB74aDmwDxndQ1gtQX-tt5Hvo-OTi5eX7-34--mIJrH6ADgJ01UFZdfCx-xXBML85uehbtHnRtwH9eL6s3cityfnyXqplbf9_5117rfWVOXMqrH_3pp6Dubx72Yb6rCyMK4YBfb_sjLHVaV9pi345E65YdaEJV5ebqmjKsxfeOn1mVFY2BOeLKUi38xIF7Wbo-NZk_1vyv18AXV6HUB66DB6BKhHkDkFuD8-l6iD8q1eHeiPchGHVA1nfgGLUwbjqYJx3IPN1CM3RSV1WD974ne0HqLw3UXmFNlVezbnb7WfMUo1xmsSEpZkljBudRSkXJpaYMQt1mLkP_vftPwEAAP__MOgZ2jQFAAA=","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.montenews.me/blog/drake-maye-stats-unpacking-his","date":"2026-01-02T17:51:23.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1STzYtcRRfGq5N534UuxEQMiIsGXSg4PfV1P8osxDFGgjEJSSSCuKiv2ynn9q3rrXv7TmYVDUjAzYgg4urO6UkGY5C4ETdC6HEXEKbdOIvMxj9ByEIISE8GRs_inOfUrxbPKU59vtHsIQaN3L3wnl9zeS6XogHuv3LFFca3oX_ucp_gAT7Zv-KKmJ_sr85TNX6dMD7Ar_bfsXrFL1FMMCaY9E-7ymZ-dWmfgivvCjIQeMDpgEQcVqv_9qHpQZA9MOM9dAycmT3zZ_YhOD2FYnTvlA0rtS9fe3vU5LL2FYzN1vvFSuHbAkaHMqt6kBVbB7fBhxlC3xwBX2wdTAB-vDmfAJSboSPPPwRVbB3YBDW-9cSpysEWoMzT0I6nYPNtcHIK2t8AZ3YQgDZw7jwUo9vnfNXKa0-onNMZWnj0F7h2hhYePgfF6Ifl3K32L_m8qZ0vAqxmHbjVKbjhFMpmG-q1Hrh2G3T9GTjzG1p6dBaK0eb5kHtwZvdlobmJDMWLlKfRIo8itigIThYJjbCylhFm8f4TuWwKMhyFJvSgcT1osh40ZQ9GZrfPcco1kSzOhNEJ5pJzYxUWKcVYCp1Aoz8FZ9ZBV9ehrK7DivtqhtDjOzvRsR2yB1VzH8LV3Z-4JDZRMbUxSayMUxVhwkQiLWWYZjFPecK1yUScSq5ohE0qBc4iSpilcZQmIk0UM0xFUpiEJyolklgpCBM6EobShGWxpUwKIRJlZEYw1THHBKc4ojzDPLHCUkuiiGQRE4YzoRKaEGMslZQwg0XMYsOkSEScaqZSTJMUgulBqBGMTQetRdAGBK1E0DoEbY2gHXe3TB5o6G6bPDSKHFR6UFk38fVwQ97y9dAWCGS1DpXpNl35SbgBuj46WcuCmfh5kqruJlKZbqPcQ8_uL8Rj_SWs2N0-4URSooggmDOipaRMWIEtNtoKLSQE14ELR0CGHqy5GTrx89dQuhla-OMpUHIbQr4N2r0IsjkBsp0kNAV5FQSGteLeyI8qK42rB74aDmwDxndQ1gtQX-tt5Hvo-OTi5eX7-34--mIJrH6ADgJ01UFZdfCx-xXBML85uehbtHnRtwH9eL6s3cityfnyXqplbf9_5117rfWVOXMqrH_3pp6Dubx72Yb6rCyMK4YBfb_sjLHVaV9pi345E65YdaEJV5ebqmjKsxfeOn1mVFY2BOeLKUi38xIF7Wbo-NZk_1vyv18AXV6HUB66DB6BKhHkDkFuD8-l6iD8q1eHeiPchGHVA1nfgGLUwbjqYJx3IPN1CM3RSV1WD974ne0HqLw3UXmFNlVezbnb7WfMUo1xmsSEpZkljBudRSkXJpaYMQt1mLkP_vftPwEAAP__MOgZ2jQFAAA= HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.pubk9RyFa8e5ukJHuzTymLyPc-3eUMVk9YneCNp2gmg; uid_id2=9c4d5d20-2485-4553-9107-1250bee313e0:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl16606097=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 02 Jan 2026 17:51:23 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b5a54b5c473f5c1d323a09f94aad767a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T05:23:22.948737Z","times_seen":15945479,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}