{"report_id":"b12f12c9-7890-4867-bc77-4ff655d83f70","version":6,"status":"done","tags":[],"date":"2026-04-09T13:20:57Z","url":{"schema":"http","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"title":"Microsoft Sign-in Redirect","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-16T12:30:05.94196Z","times_seen":1038532,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-14T13:20:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T13:20:34Z","timestamp":1775740834,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37388,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-09T13:20:34.347159+0000\",\"flow_id\":754031565865410,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":37388,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.3\",\"port\":37388},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2669,\"start\":\"2026-04-09T13:20:34.328130+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"logincdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":23083,"first_seen":"2019-04-23T01:13:28Z","last_seen":"2026-04-08T16:12:50.98145Z","alert_count":0,"request_count":1,"received_data":4352,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-04-06T05:40:12.052667Z","alert_count":0,"request_count":2,"received_data":815982,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets5.lottiefiles.com","ip":{"addr":"104.18.38.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-03","domain_rank":1873573,"first_seen":"2020-11-16T17:45:01Z","last_seen":"2026-04-08T20:37:47.747987Z","alert_count":0,"request_count":2,"received_data":277471,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-02-14T14:33:52.133893Z","last_seen":"2026-03-23T12:39:26.293254Z","alert_count":4,"request_count":2,"received_data":45421,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]}]},{"fqdn":"prod.spline.design","ip":{"addr":"54.240.174.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-20","domain_rank":1418142,"first_seen":"2023-03-09T07:21:21Z","last_seen":"2026-04-08T20:37:47.742418Z","alert_count":0,"request_count":1,"received_data":531,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-05T23:57:55.191025Z","alert_count":0,"request_count":3,"received_data":2465828,"sent_data":1495,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-16T12:12:24.047014Z","times_seen":49441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f58ffd4fc3ad4fad71d90b5922109e7e","sha1":"a9209eefd9faf424012b06f9318e9111396a6cd2","sha256":"8b1ec21a36f7fc8946af1a6e6506d4beb021a9354851549deac984d44e4ce308","sha512":"55c18862e96854e947249681164af9fafe946ec9eebe98b92e3473cc1beeecd5190e0f44a1f1f5b502ba2b5d17650e572a8dee702921a6b880b0edd63dcc6af1","ssdeep":"","tlshash":"bd3136fc18f34517848711ae86cfa33a64a854e74d2bbcaa365d48898fc91cc12b4b79","size":1571,"data":"","first_seen":"2025-02-26T13:52:21.256576Z","last_seen":"2026-05-09T18:32:54.826822Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-08-16T02:54:55.715543Z","times_seen":4796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cbddc11889dd21dff8a8f2797870366","sha1":"f78dc539e1e84167d4cb79bcc764d2a726761fa7","sha256":"eb9e7df1e7c72e9e45c2002808eaff9e5d53b257d142f739175d7172d648f130","sha512":"669c8f2c32d06291d7b4fba9681a436e080c738e0fa9af089dda20ee598812d927e00c0f9034bb3160fa338d5aecb8a8b3afc89cace42b1929742462cde5fd5d","ssdeep":"192:E/wVfnwl27SVTCYiKwuSX1AKih5601IEhQxsswVBFIXtw2MqJy6xpCZCYG4ICkjU:E/GP57gxygThQyswVBFIXtw2jdxl+","tlshash":"32224d8d38e321715aa7713e570f610a3936414b340deda8bc9e93001f25f6acae3bd9","size":10804,"data":"","first_seen":"2025-03-30T10:53:39.070228Z","last_seen":"2026-04-09T13:21:01.788204Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6d5a090e3150aa9af94092bcfe9894","sha1":"1da725846f7c644e56eb1536607098d9173c9bfb","sha256":"45476948bbac9896ba3148290c27d68a4b8b6f45481099f5bac9b62fab75acf8","sha512":"776f90ca2e88196397dc012ce70348f70642a93269fd4ad9fdd57c62c0a6e03d3f76518ec425a985128541390b617580984e64a1cbfddd9a90d4c2440963aaba","ssdeep":"49152:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4tgJSs89CqqqeC:WaHKPsqPjTxX6","tlshash":"04757de433a57027879b919650760142b33ab4d61809842cbe2cdceb7ba5c4672fffb5","size":1695626,"data":"","first_seen":"2025-02-26T13:52:21.259294Z","last_seen":"2026-07-10T15:06:51.919079Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 13:20:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e99cf5bec7656bf-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Apr 2027 13:20:35 GMT\r\nlast-modified: Fri, 13 Mar 2026 03:23:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:RUdpSLusmJa6MUgpDCfWikuLb0VIEJn1usm2L6t1rPg=:\r\nfly-request-id: 01KKJKGSMVKDHEQBRAZ04TYA5G-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1695626,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c06deae1e67461e65c7e7dc07f296fec","sha1":"3052613f5387e3c73f852c67e7c5d35e907bf8a0","sha256":"64a21852082e98f3adc3b136c328b46ae9d5c54edbb435ee9d3dbfa448ff9f7f","sha512":"3ab2cb7694010c3cf25810974349a8847ed989541de386307ce347b8fbb329a0c61ce99797abb0e4dade8df069b8070b9e963b5a857d303560a169ea6a50575f","ssdeep":"24576:f7EXabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4t:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxe","tlshash":"b5256ce473a57027875ba096147a0446f33db8e61c08442cbd2c98e77ba4859b2fbff5","first_seen":"2025-08-02T03:37:30.982446Z","last_seen":"2026-07-10T15:06:51.915178Z","times_seen":165,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":28,"dns":11,"connect":1,"send":0,"wait":630,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 10","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 08 Apr 2026 23:01:16 GMT","end":"Mon, 05 Oct 2026 23:01:16 GMT"},"fingerprint":{"sha1":"9A:65:0B:AE:1E:F0:90:D4:5C:35:23:B3:14:58:6B:A0:A8:50:0C:27","sha256":"09:ED:1C:90:23:D8:B0:E2:0A:24:A5:16:AD:4C:D7:DB:57:09:A7:9C:C4:09:46:CB:DB:88:5A:04:DF:B7:C4:04"}}},"request":{"raw":"GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 13:20:35 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1435\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 01 Nov 2024 20:25:02 GMT\r\netag: \"0x8DCFAB34403395C\"\r\nx-ms-request-id: 4a395764-601e-0028-7038-bdd541000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260409T132035Z-157fb874dd7mr5nshC1SVGafgn0000000r800000000050eb\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-08-16T08:12:13.964928Z","times_seen":128423,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":116,"dns":96,"connect":8,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 13:20:35 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::md8nh-1775101186152-d45e2b42ab64\r\nlast-modified: Thu, 02 Apr 2026 03:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 639648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5ynMhsL3XRyHazqO1rHnLN2LsfKWpAWdy18lgGaPSV031oqJAtzXin%2FwcSWLjrjwkTiCbAxjr1CWXSKcFJL2vl3MWAg6D0cR7vbawbCs%2FX%2FNjUJCG1XSqFD5fmSqjvWgR0BfIM%3D\"}]}\r\ncf-ray: 9e99cf5bf91b56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-16T12:12:24.047014Z","times_seen":49441,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Apr 2026 13:20:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e99cf5cea643181-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 356868\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Apr 2027 13:20:35 GMT\r\nlast-modified: Fri, 17 Oct 2025 00:03:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\nfly-request-id: 01K7QQMF8N1G3GB9FWMCHE11KT-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-08-16T02:54:55.715543Z","times_seen":4796,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"104.18.38.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 13:20:36 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=NncW6LRTjuBJgrdDIyDzMV7fxde9nwMcsMk7Dssx.6w-1775740835.8652556-1.0.1.1-_.7HtYm9xvEJRej367Ui3vE4FfupBAOzcphQQZDy1IzqchLInxNYmuD6t9KBkZKussFxM4DWvA7KApdqW2sTjP.YDLMnEBfvgXfjhynpqvkQXu.F7qbVVgQLFh2QBk2M; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Thu, 09 Apr 2026 13:50:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: f-kFWevGPAfcLlQFZC9Lxvxt8ePeNQ31L6XQojODZ-x76Ftc1gF0Ig==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e99cf602e5c0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-07-10T15:06:51.910993Z","times_seen":399,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":59,"dns":38,"connect":1,"send":0,"wait":523,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/favicon.ico","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:36.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 09 Apr 2026 13:20:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 27150\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9e99cf647c120daa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"46dd133ee00dc1bae5e4eeba7b88432f","sha1":"8af86a4ac91ce48c062216fb94a6e1d57618a19b","sha256":"9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66","sha512":"cb49f9e3812e2c262af374e79bd8905cb508a45bf2c2d6af62eed85af43770872486a55e9425882feda9fb3a57a317a3c18be1e286adaf0c76be7f1b0dfa8474","ssdeep":"384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3","tlshash":"e3c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2024-07-03T19:18:11Z","last_seen":"2026-08-05T04:28:12.442105Z","times_seen":32697,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 09 Apr 2026 13:20:35 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::2686f-1775740041337-4f144e9e6b84\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 793\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaIEaX6VPfmSzpnvtBxzClA%2FsLpgjaJSKQser4VF2Vx8FBF0mT9NFihTbiAaGbwwyFzQT1ckTYXF9ePEZrwS8bG3j8a06kp0vZZkCY3SLhLhTOq7B3ZCQEWnsQ3OtP6JuMp5f7M%3D\"}]}\r\ncf-ray: 9e99cf5bd90556c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"104.18.38.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nOrigin: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 13:20:36 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=AzrNuyRAwImwu9q6CQZTjKBD917a9B9LQ1n4ebWQLos-1775740835.8665304-1.0.1.1-x3AgIO1OFzbtrcAwc1f4swIpeBfEhWjVHL6P24kCLnsEFfX6O5rNJ1OK1fwSFUD42CbNkowgg1jF2joCCHRVaaD5O6P8En_Dw7ffgTCO.0v7ppj0Bp8LONHXaQJ2mbWC; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Thu, 09 Apr 2026 13:50:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: G_UxfSU61k5u81DWXuEC8TBogONdWr8MWhpaKp9KK1ZnPdVUuLCgqA==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e99cf602e680883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-07-10T15:06:51.910993Z","times_seen":399,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":59,"dns":37,"connect":1,"send":0,"wait":521,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode","fqdn":"prod.spline.design","domain":"spline.design","tld":"design"},"ip":{"addr":"54.240.174.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:36.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spline.design","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:8F:BC:30:7F:E6:20:54:82:40:AE:8A:6C:E2:35:85:23:4D:C3:D7","sha256":"55:5F:A5:8E:EB:74:A9:74:C5:A3:FF:00:8A:7C:E9:07:F9:0E:37:9F:01:DC:2D:E1:E7:3F:C4:34:A2:07:76:6D"}}},"request":{"raw":"GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1\r\nHost: prod.spline.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nOrigin: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\nserver: AmazonS3\r\ndate: Thu, 09 Apr 2026 13:20:36 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xTkiHhx0wwvZZMR_kh0LIeQ92b8K9G26p7L_x9dYilmAtm3r_pWR-w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"b6c792c0f58fa3ec92173c074885221f","sha1":"0dde8fd9111d807e202b2fb37f8bcc4052fd861e","sha256":"a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938","sha512":"83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875","ssdeep":"","tlshash":"51b09201b208a82a19514e3a373cf110e310593102c426a8aa96a88317828914d08325","first_seen":"2025-01-13T10:02:12.3839Z","last_seen":"2026-08-16T06:48:20.256185Z","times_seen":7683,"resource_available":true,"data":null}},"time_used":1194,"timings":{"blocked":405,"dns":75,"connect":1,"send":0,"wait":379,"receive":0,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","fqdn":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","domain":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-09T13:20:34.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 09 Apr 2026 13:20:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 17752\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"1c8db0d4725229187386f6a5aa317820\"\r\nLast-Modified: Fri, 28 Mar 2025 07:02:14 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9e99cf56cddf0daa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]}],"data":{"size":17752,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1c8db0d4725229187386f6a5aa317820","sha1":"61fdee911c96dbce8d032969be04b2dff72ab3ea","sha256":"40d0232aba2fe528142f8e35692e35d855779251019eddf532212247967b4b1d","sha512":"cac26c7cd1aeeb508063aa74aefcfa4bc6906fcb85f12cf5df21f249099fc782a7dedd87d6c538c31941abdfa8be99e8cad2c1b4e0ed5827eceeab4ed56aa53c","ssdeep":"384:kiSsY1ON59FX/GP57gxygThQyswVBFIXtw2jdxln:kiXY1ONhX/GhUhThQyswvFIdwcn","tlshash":"3482a59e38f310325593617ea39b760a3d768507a50edd68bcad43401f82fa9c9d37e8","first_seen":"2025-03-30T10:53:39.064331Z","last_seen":"2026-04-09T13:21:01.78629Z","times_seen":12,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":65,"dns":30,"connect":4,"send":0,"wait":590,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/index.html","date":"2026-04-09T13:20:35.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-b03a69ad30ee4739a0deca2eabea959e.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 09 Apr 2026 13:20:35 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e99cf5befc45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":29,"dns":0,"connect":4,"send":0,"wait":24,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}