{"report_id":"b11e1ee4-0a74-4981-91cc-d7a23fbdb9de","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2025-12-05T16:29:05Z","url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"title":"Business Help Center | Privacy Policy","dom":{"size":6867,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1342)","md5":"4de1986c4868c1eb1aa7028ba3efa9c1","sha1":"55b5072fff1af293e87caf542c51f15af7278c38","sha256":"d017a20ec2297592d28515020bf5c416c8eb38a24beb9c55814a7a6be67882b9","sha512":"bd87d4ee333b607baafe3a5de0b1796c3842b67ceaa357f891cf4e31591498ed169440adba5ed9f0f6dbaa29c76a910656e003df85ab9374d146d304d5dbdea7","ssdeep":"96:njG9+munlwJECXBM+g+9plpV4d4LB6JROmm+Tv3j:jG+mulwJECXe+g+9plpV4d41SpxTv3j","tlshash":"dde1656c19f4200450a382b47eeea3283768d19f855b9cfdf3e64092cf84a4d7bc5352","dom_hash":"domhash9a1f5db3e4d241751f45f21bbe64ec47","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-09T16:29:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":2,"analyzer":6}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-05T16:28:43Z","timestamp":1764952123,"ip_dst":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":37362,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-12-05T16:28:43.204822+0000\",\"flow_id\":2241509210130260,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":37362,\"dest_ip\":\"172.66.47.190\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"mariana-noreply-sp1100879.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3516,\"start\":\"2025-12-05T16:28:43.198484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-05T16:28:43Z","timestamp":1764952123,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":48024,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-12-05T16:28:43.809825+0000\",\"flow_id\":867435355522201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":48024,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-12-05T16:28:43.803993+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-12-01T01:10:08.996514Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"freeipapi.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-04","domain_rank":19578,"first_seen":"2021-11-05T09:28:44Z","last_seen":"2025-12-04T00:17:40.107804Z","alert_count":0,"request_count":1,"received_data":516,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mariana-noreply-sp1100879.pages.dev","ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-05T16:27:31.77022Z","last_seen":"2025-12-05T16:27:32.807394Z","alert_count":28,"request_count":5,"received_data":380915,"sent_data":2599,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-30T22:25:26.998026Z","alert_count":0,"request_count":4,"received_data":378528,"sent_data":2094,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d7e45ac70e7cb3acced6f1d0e2149fc","sha1":"4fec801d05259e99c87f5d88aab6926cdbe87c3d","sha256":"e633efd7b404d61a23ea135da84cd10c6e40a436bd59fd340ee3c8581098dfa9","sha512":"f8259d6aa29f420ce8d4be5ef780c466666c5948f4654a98622b5244e2ee0727872b85c9e4e95ee5b7f266030f4067d4c10918ce0712040aa774e10be1802038","ssdeep":"","tlshash":"1e80002eaf020ca0a38e8a8fb00c0bc038c008a2800800b88a8a02c03a8028f203a0a3","size":33,"data":"","first_seen":"2023-10-15T14:41:00Z","last_seen":"2026-06-06T10:13:55.603341Z","times_seen":6784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e91b2616629791b375867c298dc846cc","sha1":"aa77ae4c49f525bc21de1d04f08a5d73962c7cce","sha256":"d949f1c3687aedadcedac85261865f29b17cd273997e7f6b2bfc53b2f9d4c4dd","sha512":"415b3c2e8e3717d952b81ca469d0dbd284970cbfc16d9e7cf2ead6542470488a1ec10bff1308357fce262b753bf746d9d057e115ad584905262211bea4844a7a","ssdeep":"192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G","tlshash":"2e22d6e4b942f0448a7338f1117f140f727eaea9b84c8db0a196d9d43db45ad9127f4e","size":10751,"data":"","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-06-06T12:12:09.411209Z","times_seen":67429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d4842a904e5d5d1b19240075998b111","sha1":"feb8ddc9d0566a4fa0971a6e1138658618cdacfe","sha256":"35f4f974f4b2bcd44da73963347f8952e341f83909e4498227d4e26b98f66f0d","sha512":"e9ad75d3bad3940e2062980702a6f02c0b719968a905d24572af32e52fda4e07b7069f95024940066d8b3be2a0e75bce591f49319ab53af8e5e6da65b8da5379","ssdeep":"1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm","tlshash":"0cd318e87992f6426ab202ab10ef1443777c9a27784c4cb1e540fddd64b806da17bf8d","size":131835,"data":"","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-06-06T12:12:09.440989Z","times_seen":67330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/assets/index-bc178ea5.js","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe2cf51feba35888c378ea262ca5530e","sha1":"0ba6b3e520339020cc749c5814b0c03b9b984708","sha256":"6e1046a56d290b53027dde417b964c5604b0b70358f06dc36df7fbd27d2ce735","sha512":"5e86d14daf1d6d558ae265d4b09da3a98f2b53c87fe1b71e47913d8763e4914beacda101ba6d00aa72ca8bd09b37ba46ffdee8599e5ee37d833bdf27b6ce4895","ssdeep":"3072:20T6Zr/NjcqhaZ/BktXbherv81G6FWsGh+u8K+JgYGc9j2FrcKFvs1b:N4aZaCv8/FWsG6bJgYGc9j2NPFvs1b","tlshash":"eb4439d831aab165abb306e1006f0107b33d2d17680d8860f175ed9e36b554aa1bbffd","size":278589,"data":"","first_seen":"2024-04-25T09:58:07Z","last_seen":"2026-06-04T10:32:02.611536Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/assets/index-bc178ea5.js","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mariana-noreply-sp1100879.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 05:54:24 GMT","end":"Fri, 09 Jan 2026 06:53:03 GMT"},"fingerprint":{"sha1":"69:3F:E3:20:A0:20:C2:63:BA:5B:B4:DC:E8:5A:33:AA:89:CA:D8:7C","sha256":"28:47:47:48:C0:73:0F:25:B1:B2:A6:AA:5B:E5:C0:39:0F:BC:25:AB:EF:17:4F:E6:26:91:39:0E:BD:71:E6:FA"}}},"request":{"raw":"GET /assets/index-bc178ea5.js HTTP/1.1\r\nHost: mariana-noreply-sp1100879.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zREiF%2BU82ZmehmCqVk%2BMRpiUdx6pBJlkdzuRCEyiLv3jZSSt%2FMTIEVqHziBUnHbc8QrzwL08BZzFUiN%2BFBx4fwFEe65ulqyTvu1SX4ujtc0UpBsWDalZ5FPyCJ7A%2B0LvUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"497fafb72de1b008b332ba2c081d569f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a94eb13b9e8568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278589,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37546)","md5":"fe2cf51feba35888c378ea262ca5530e","sha1":"0ba6b3e520339020cc749c5814b0c03b9b984708","sha256":"6e1046a56d290b53027dde417b964c5604b0b70358f06dc36df7fbd27d2ce735","sha512":"5e86d14daf1d6d558ae265d4b09da3a98f2b53c87fe1b71e47913d8763e4914beacda101ba6d00aa72ca8bd09b37ba46ffdee8599e5ee37d833bdf27b6ce4895","ssdeep":"3072:20T6Zr/NjcqhaZ/BktXbherv81G6FWsGh+u8K+JgYGc9j2FrcKFvs1b:N4aZaCv8/FWsG6bJgYGc9j2NPFvs1b","tlshash":"eb4439d831aab165abb306e1006f0107b33d2d17680d8860f175ed9e36b554aa1bbffd","first_seen":"2024-04-25T09:58:07Z","last_seen":"2026-06-04T10:32:02.611536Z","times_seen":157,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/assets/index-d076d531.css","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mariana-noreply-sp1100879.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 05:54:24 GMT","end":"Fri, 09 Jan 2026 06:53:03 GMT"},"fingerprint":{"sha1":"69:3F:E3:20:A0:20:C2:63:BA:5B:B4:DC:E8:5A:33:AA:89:CA:D8:7C","sha256":"28:47:47:48:C0:73:0F:25:B1:B2:A6:AA:5B:E5:C0:39:0F:BC:25:AB:EF:17:4F:E6:26:91:39:0E:BD:71:E6:FA"}}},"request":{"raw":"GET /assets/index-d076d531.css HTTP/1.1\r\nHost: mariana-noreply-sp1100879.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrhJdrJTeSu8h6EYAd3dWAsozt39DGntsmTka%2FR7iINwDGWsdgvJdK%2Fvte7zSZ3P3Kw%2BGv9Y8wGGjjR60XuieUtN7VBApZGIRuaeszmNC7t6m%2BHjo0rv%2Fcd95wkgvsYl6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b46365c677a01353b73be922ebf8d4d5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a94eb13c9e9568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10139,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10138)","md5":"9e8a83940f70cf868ab9ff3af0f4b4c8","sha1":"ee8165bded6aa3aecce0697ad22d602c11bf3085","sha256":"d076d531cc08f01d753f7cda70ed0e97907546f161cbf470b72ef2fea31c1f0b","sha512":"ea8365e9322e7af32dd12a301592a845d11a4e96d13f578e66a6bf2c4d543c88a980176fef149cc3e305b3c74b7acf3ba7dade07584434646c52fbf66a1877f2","ssdeep":"96:4Dw4yJ24lUXxk4e06i0y2y171sSIK6yR+VfjbqSWN4RdwYM+N0RP9oe+zvc4MV9q:4DC24+oD5vqSWgjMXoe6MUoSd","tlshash":"1f22ebf75a620b2d6c0b6837175ae508666ef44488b682b0fc92d3db11c75d80a7bf27","first_seen":"2023-10-21T19:24:17Z","last_seen":"2026-06-06T10:13:55.596792Z","times_seen":6398,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react/umd/react.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/\r\nOrigin: https://mariana-noreply-sp1100879.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.3.1\r\nx-jsd-version-type: version\r\netag: W/\"29ff-qneuTEn1Jbwh3h0E8Ipdc5YsfM4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\nage: 25508\r\nx-served-by: cache-fra-eddf8230040-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4393\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"e91b2616629791b375867c298dc846cc","sha1":"aa77ae4c49f525bc21de1d04f08a5d73962c7cce","sha256":"d949f1c3687aedadcedac85261865f29b17cd273997e7f6b2bfc53b2f9d4c4dd","sha512":"415b3c2e8e3717d952b81ca469d0dbd284970cbfc16d9e7cf2ead6542470488a1ec10bff1308357fce262b753bf746d9d057e115ad584905262211bea4844a7a","ssdeep":"192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G","tlshash":"2e22d6e4b942f0448a7338f1117f140f727eaea9b84c8db0a196d9d43db45ad9127f4e","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-06-06T12:12:09.411209Z","times_seen":67429,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":62,"dns":6,"connect":28,"send":0,"wait":14,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/assets/banner-b1482d4c.webp","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mariana-noreply-sp1100879.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 05:54:24 GMT","end":"Fri, 09 Jan 2026 06:53:03 GMT"},"fingerprint":{"sha1":"69:3F:E3:20:A0:20:C2:63:BA:5B:B4:DC:E8:5A:33:AA:89:CA:D8:7C","sha256":"28:47:47:48:C0:73:0F:25:B1:B2:A6:AA:5B:E5:C0:39:0F:BC:25:AB:EF:17:4F:E6:26:91:39:0E:BD:71:E6:FA"}}},"request":{"raw":"GET /assets/banner-b1482d4c.webp HTTP/1.1\r\nHost: mariana-noreply-sp1100879.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/assets/index-d076d531.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19448\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a1e9b3e7e6cf7d7c8ecf642f00d3fbcb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rT8Otz11lBaxUbJ4%2BUMBO58verArp2c54RoFsEaI4kr9DIJD7vhAGG1MflK9qU8%2BtebYD5yTDfmTowjq0FuNJ25kSWIJMqic%2BGbcwTnu4hMP6IV6Oau8qbGN3MMrwjjbeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a94eb158ba6568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"33d130a638f79ca24fe5ad135106ed69","sha1":"78b969c7f3d1054328f744b31b75e7f0b4ee1b2d","sha256":"b1482d4c704e1c61cdeb07b3fa9f32da4ab26930733bb54d1f123ff2ded13bb4","sha512":"0a8e9163d187ed56e169806a9882289ced57acf797dc94cfedbc55ac480e5547a8539043eb0c8a3dbff40f89cce5c9967087d0dc7eba14a1291838344d588381","ssdeep":"384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd","tlshash":"7492e176dc9b996c84334ae31e63514d336f8011ac894add6c12608c7e538ca9f9def5","first_seen":"2023-09-19T07:58:35Z","last_seen":"2026-06-06T10:13:55.600633Z","times_seen":6639,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 07:43:05 GMT","end":"Sun, 01 Feb 2026 08:42:55 GMT"},"fingerprint":{"sha1":"BE:9D:76:9E:9E:2C:F2:8E:38:C4:E9:42:11:6A:45:24:E9:59:0A:5F","sha256":"D1:C5:0F:C4:11:DF:FE:54:9C:EF:8C:40:56:6C:79:4E:F3:E6:0B:24:15:B8:E1:60:2B:49:C2:41:96:C9:79:83"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/\r\nOrigin: https://mariana-noreply-sp1100879.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a94eb15ea225ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-06T12:19:04.44161Z","times_seen":93210,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":119,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-05T16:28:43.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mariana-noreply-sp1100879.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 05:54:24 GMT","end":"Fri, 09 Jan 2026 06:53:03 GMT"},"fingerprint":{"sha1":"69:3F:E3:20:A0:20:C2:63:BA:5B:B4:DC:E8:5A:33:AA:89:CA:D8:7C","sha256":"28:47:47:48:C0:73:0F:25:B1:B2:A6:AA:5B:E5:C0:39:0F:BC:25:AB:EF:17:4F:E6:26:91:39:0E:BD:71:E6:FA"}}},"request":{"raw":"GET /help/contact/132459758825549/ HTTP/1.1\r\nHost: mariana-noreply-sp1100879.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXovebvHNrqAd2nJbcZVBhumaFeRXlAgF4TuLdXHX0I3kOQ17UYJ4%2FSmE7w3Wl6QH6RaDQOh6mtbYe3e9yoypQ%2FEQM8qfwEOXHkJibACFao1AYb70LSZvCjSMY3Vev2Rhbg%2F\"}]}\r\netag: W/\"a6217e063566ee0c60163f28b5a75f3a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a94eb121a450daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a2e6dff37bc4753da65904f125d08ce9","sha1":"3c1e92d7c12b2be1d23c72c257ddf31f69f35d53","sha256":"ab3259143a3035cafee822ef3799a7dc31d4d909f7459065fe123dc2a7e18ce7","sha512":"b9b44d8f7c4d1f973ff56395a426e6061f6b7e6204ac2196543e4f6c7211786d3116e5acc61906ed462b9b85d35e8e117d1fa18e5bd3babac1165ba413454062","ssdeep":"","tlshash":"a821008f9ca0c5421614069f7567f088bc97b29f0198d9c876fee1248f462cf4daf469","first_seen":"2024-05-09T07:20:25Z","last_seen":"2026-06-04T13:32:05.000337Z","times_seen":78,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":69,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/\r\nOrigin: https://mariana-noreply-sp1100879.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=30, s-maxage=30\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"51-S6Kq1/VUEOoHhwMiQIclqYNwNeM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 10\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\nx-served-by: cache-fra-etou8220134-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":61,"dns":2,"connect":26,"send":0,"wait":42,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/\r\nOrigin: https://mariana-noreply-sp1100879.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.3.1\r\nx-jsd-version-type: version\r\netag: W/\"202fb-/rjdydBWak+glxpuEThlhhjNrP4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 39156\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\nx-served-by: cache-fra-eddf8230121-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 43509\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"7d4842a904e5d5d1b19240075998b111","sha1":"feb8ddc9d0566a4fa0971a6e1138658618cdacfe","sha256":"35f4f974f4b2bcd44da73963347f8952e341f83909e4498227d4e26b98f66f0d","sha512":"e9ad75d3bad3940e2062980702a6f02c0b719968a905d24572af32e52fda4e07b7069f95024940066d8b3be2a0e75bce591f49319ab53af8e5e6da65b8da5379","ssdeep":"1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm","tlshash":"0cd318e87992f6426ab202ab10ef1443777c9a27784c4cb1e540fddd64b806da17bf8d","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-06-06T12:12:09.440989Z","times_seen":67330,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":38,"dns":1,"connect":15,"send":0,"wait":19,"receive":11,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mariana-noreply-sp1100879.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico","fqdn":"mariana-noreply-sp1100879.pages.dev","domain":"mariana-noreply-sp1100879.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mariana-noreply-sp1100879.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 05:54:24 GMT","end":"Fri, 09 Jan 2026 06:53:03 GMT"},"fingerprint":{"sha1":"69:3F:E3:20:A0:20:C2:63:BA:5B:B4:DC:E8:5A:33:AA:89:CA:D8:7C","sha256":"28:47:47:48:C0:73:0F:25:B1:B2:A6:AA:5B:E5:C0:39:0F:BC:25:AB:EF:17:4F:E6:26:91:39:0E:BD:71:E6:FA"}}},"request":{"raw":"GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1\r\nHost: mariana-noreply-sp1100879.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\ncontent-type: null\r\ncontent-length: 67646\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0ce70d7a4746dfe57b6742a6942dacfa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQ0ok83feb5w4%2FX14XQ9bdezQhUrJz1HoJ9PobtyjwZjzLlggFfloUkQSjknXDFSNj1uJNo70ZdBZ1s%2FJSWNKlAPjLvruW0vLqOHy67d%2FJ%2FblNhvKa6deyikxMpPYd%2FtMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a94eb15abbd568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"b4ed067cd6fd61a575e883605547d535","sha1":"c159935982f1cdf3f04419c8c863fd3d030bf5fe","sha256":"f2dfc6fd9ed43d5c82d0f40627d75a70c26dbfa9b6aa1c450fbd75e5f0ad2cfd","sha512":"1c2d2f88fff5c75127e97fcaec3c8597738adafca9e98bce43886e1beeebdcecd0d0bcd46a145b94c6adaee39540e6c559189cdf0d4c820b35f6b66bb9452761","ssdeep":"192:o9hmOxc0e2tbU/nDa23cIwAhvr1tyIVV5/dCaVi6W4ln6EdDfqpGG5:2me0aYcIwAhZUIVMKtlP1fRG5","tlshash":"0463cff9d007b089f4566339b6a5d815392f5db86e61bfa6ad083cb20bf39cd44c9c12","first_seen":"2023-05-15T13:52:22Z","last_seen":"2026-06-06T10:13:55.602097Z","times_seen":6628,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-05","alert":"Phishing - Facebook, Inc.","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-05","alert":"Sinkholed","trigger":"mariana-noreply-sp1100879.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"freeipapi.com/api/json/91.90.42.154","fqdn":"freeipapi.com","domain":"freeipapi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeipapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 01:38:11 GMT","end":"Thu, 19 Feb 2026 02:36:54 GMT"},"fingerprint":{"sha1":"25:D1:2B:30:61:00:B0:39:AD:32:D6:BE:1A:97:AA:F2:74:60:56:3B","sha256":"E9:80:62:81:DB:70:55:AA:7A:0C:61:F9:7E:F1:5B:CA:16:E8:00:71:39:82:09:FE:88:07:0C:C6:5E:18:A5:A9"}}},"request":{"raw":"GET /api/json/91.90.42.154 HTTP/1.1\r\nHost: freeipapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/\r\nOrigin: https://mariana-noreply-sp1100879.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 05 Dec 2025 16:28:44 GMT\r\ncontent-length: 0\r\nlocation: https://free.freeipapi.com/api/json/91.90.42.154\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yq7wrNq3P12VfuObG0RGrXPPQOcTmVFcw%2FTbQqQii6lho2WMkRjG8zdAegEf9jaTwi6LfLI7HVYXMbSAIOBVNshG0hHd%2FtG5p3fh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a94eb170e43b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mariana-noreply-sp1100879.pages.dev/help/contact/132459758825549/","date":"2025-12-05T16:28:43.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mariana-noreply-sp1100879.pages.dev/\r\nOrigin: https://mariana-noreply-sp1100879.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 16:28:43 GMT\r\nage: 567492\r\nx-served-by: cache-fra-etou8220062-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-06-06T11:45:48.232768Z","times_seen":23450,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":46,"dns":1,"connect":13,"send":0,"wait":14,"receive":6,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}