{"report_id":"b13cc1dc-afa0-419b-a4a3-4ea539c668fa","version":0,"status":"done","tags":[],"date":"2026-09-09T07:02:16Z","url":{"schema":"http","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":0,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"title":"Скачать программу Microsoft Word бесплатно. Безопасная загрузка","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T13:24:34.930918Z","times_seen":18442929,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":0,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T07:02:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"textproeditor.com","ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-09-09T00:21:00.708781Z","last_seen":"2026-09-09T00:21:00.708781Z","alert_count":44,"request_count":11,"received_data":381380,"sent_data":5946,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":11,"received_data":228231,"sent_data":6199,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":3,"received_data":99860,"sent_data":1827,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":1,"received_data":9709,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"abt.s3.yandex.net","ip":{"addr":"93.158.134.158","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":340619,"first_seen":"2022-11-18T13:36:46Z","last_seen":"2026-09-07T19:13:23.798554Z","alert_count":0,"request_count":1,"received_data":15181,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"oslo.textproeditor.com","ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-09-09T00:21:00.718274Z","last_seen":"2026-09-09T00:21:00.718275Z","alert_count":64,"request_count":16,"received_data":2361206,"sent_data":8304,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-06T23:33:22.473656Z","alert_count":0,"request_count":7,"received_data":3552196,"sent_data":3717,"comment":"","tags":null,"fingerprints":null},{"fqdn":"uaas.yandex.ru","ip":{"addr":"213.180.204.98","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":157746,"first_seen":"2022-06-30T10:21:33Z","last_seen":"2026-09-08T11:14:39.14093Z","alert_count":0,"request_count":2,"received_data":2040,"sent_data":1130,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-06T23:00:37.993111Z","alert_count":0,"request_count":4,"received_data":76340,"sent_data":2709,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fab15371adab17dd6b6598654577552","sha1":"717c95f4c2a1b40700c86979e4ebf7d15b7e8a0c","sha256":"9ab6f07f03828849f848c5ca6aee5597f58c1a1e984ee9105276f6d2c80beff3","sha512":"bedcbfb34577eddd6c38f2dca39ba871d1b2bd337303ef4c39c404308a381f3993060bd42f80749b90543ba21773f07c78f94d38ca2c013474a731214793762c","ssdeep":"","tlshash":"dcf06de894fbc707803e20615b8fa238b21241b24c48df62e5d04b5cfdb0667e8a17db","size":618,"data":"","first_seen":"2026-09-09T00:21:06.492143Z","last_seen":"2026-09-09T08:10:08.295808Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"824d1c58afa2c4583273d82605032ab6","sha1":"5488fe03ae21db76f578a337d508f28149444f5f","sha256":"18e89c81793b0b3073d3b4497e50274da75417b9df49e76852e4e0f2b0cc42ea","sha512":"5c67c46f5575563771ed667034acce40abe0954373567b5861c1dc0f180b1bb28455516eb5d6a24a40b28aca41b86f74b9810a4bc3195b1aab4a3b8bc9f8dde5","ssdeep":"","tlshash":"b5b0922982274000242ad04c3a1321b118490423673c081e02d1b02164c2cb3c814b58","size":102,"data":"","first_seen":"2026-06-18T09:59:56.82859Z","last_seen":"2026-09-09T08:10:08.296319Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0553ff384c07a743bc4de04c09ae1d08","sha1":"2af2083a44ca29e5e566c704bca4cb182e173897","sha256":"486489c648b0a173d999b02f3259d14caad961f0dc8c6f66175547ee21d2c861","sha512":"bb85e92780dbeb0df24f93573a7c453a423c8b96096d6204644db007e861b5eae2bf0cae36573bd0761f042c3959d45a51502786ccdf8155bc4527a9a4b68268","ssdeep":"","tlshash":"62119c9b1df50030403ba26c9eafa104392644035d0a7d39bccd81455f8c77f1a767d8","size":1109,"data":"","first_seen":"2026-06-18T09:59:56.829669Z","last_seen":"2026-09-09T08:10:08.296792Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"397a8e77b1e6597a1790f6397a524529","sha1":"3749a5df8643f268aa9aaa8363095c19305f4e4b","sha256":"ba9d0147264ce04a1ac289f371cede216251142472c0bd0b791f0d77baee828a","sha512":"4f24585c553f2e561029879fead7bfbf32223c5d29ca949036243376aa6365d16b334e7314b608019f4cf0726ba3c34a32ff891676132ba76985cf21ddd5f226","ssdeep":"","tlshash":"e9f0d319f85269b606f3b235c25fc70e17652406992fbd22600e58e50e7899659d6d0c","size":633,"data":"","first_seen":"2026-06-18T09:59:56.83058Z","last_seen":"2026-09-09T08:10:08.297298Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5566b27055d6c8a67c03cda9c66c07db","sha1":"a861a715a15cd5fe85999eb8794310d735f86ed1","sha256":"26484dad40cb31860a7d3e89a2f07e762553c0b304a5ceff519fa42600b802ae","sha512":"77625ad641ac81474bb34a771720b3b79c9be25ab5a9ae79bbd86530f108e84e9159c7e921e07e848617d150b3ef0709cacb6ff198b1df5ac93e3bfb84502b5c","ssdeep":"","tlshash":"46d0124c22a5163a916a206c577f7246317725e79d0598007f4c9a842fa465b60e17de","size":288,"data":"","first_seen":"2025-09-24T19:40:27.676413Z","last_seen":"2026-09-09T08:10:08.297796Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1c0d76690c6e63c02e1798f5ac12268","sha1":"5e0cfb1d22568dd106f8edcdecbb7cfb834967f1","sha256":"706b7fd8b629071c1b9ea78c711a02fe6dfd183fa0574c3325733dfb48bb0df0","sha512":"54e9901fba7650b966e7c6c14453b4e5ed27d7d22c8b90a271157a3f08a4aba6841af11940b9cc93c7e7efc12ceacd2622af2a7da922477a56c0cc209cc2b1e4","ssdeep":"","tlshash":"481121b71a14b0350f7209e1e1fecab5e002701cb11845ece916ce882e79cc7ce11585","size":976,"data":"","first_seen":"2026-09-01T10:31:31.879812Z","last_seen":"2026-09-12T14:23:48.120989Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/6978/js/app.0a32f0ee231811b7.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fa92d02d66d087919b161546f995568","sha1":"cbd49d372ae6d4baea1dfd28656f8127750df41e","sha256":"8171e1317c0acbd0d719e1d77881e2c1033ca35f7d1b45856060b900f6d860d0","sha512":"0ecfc08ff8e0d4d1a5934f0fa1d6b20177f3bba37b1bb922722bc1f717a82a9e65266994f762ac79e539f021f4df5b12ffa33ff32dfd201a0b841743a533a301","ssdeep":"768:FVsLuL+16cjtTL9CS2lXNgv2YoIbBjLFlpcHJVFqFpoCtAru18bmGVVhc+:Qo+wcjtTLH2lElZTWFqFporzDt","tlshash":"b0e209a9307b927504fd469b627d2351f13224597416482cb83cdcce68bce8a73666ff","size":32373,"data":"","first_seen":"2026-09-09T00:21:06.403005Z","last_seen":"2026-09-09T08:10:08.262795Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/js/app.cce87e481d207619.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7ad1351803d2dccaca17ca577905440","sha1":"2a905f2c91af82a8e0df7def08979956864cb176","sha256":"130d205e8b1d60362bad62ea6818a905189cf79e926d84a33656a34d245c2dd3","sha512":"48031b8208ad800c22164b58f0cc3c4da5a50ac598cb396d94639961e79500930599f4dc3e4933da691947f36d822e950a3bf58672fdab5f8b642bad304ccf1d","ssdeep":"96:2cJdo52QpRAyHB4ZwMXiyvIYFVCsDTxYZFPcc+M:2cJdo5pXjHB8w4ioImDGgM","tlshash":"4c91f8203098bc7801f76a50b82fe882767230e5409f9120f0bd94ae1f7e1d911b1ff9","size":4545,"data":"","first_seen":"2026-09-09T00:21:06.394897Z","last_seen":"2026-09-09T08:10:08.287272Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@17.8.8/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4437a0deae2d14e7078a5e366f6ccaae","sha1":"f624bf32d7ed16d9d22ab0a7aef5f8125d06a089","sha256":"e40abf3f23b23cb01de7feab31773f2dbf94074cb0fb0feec8de182b1c69efb3","sha512":"4efaf5658d82ff2c46d93df7d9ea119bdeccbfc8bbb501bc925a68f0a09abeeed2da4f94adf4cc4dd14837dae58252cc3de2a8d00dd42ff3e11219f2c2701b22","ssdeep":"192:pDvu5/2Pbu1ZWhbat1oee/9X8UnZEHuuwJgbClI+YkFG/uW1eqa93Vw:pTw/4Dt0+IHHu5C","tlshash":"f00232487946b46b3973f0f6218f02ca353a24526ced6854a6e1f8f82d7858d1863fbd","size":8915,"data":"","first_seen":"2023-12-25T14:08:10Z","last_seen":"2026-09-10T22:52:34.772905Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abt.s3.yandex.net/expjs/latest/exp.js","fqdn":"abt.s3.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"93.158.134.158","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57153a8b90bf41a3293492eb9b9908d4","sha1":"ea9e83f87b6c3573d5fc78dcbcdd450898ce059c","sha256":"4776acad9d8c3dd1b75354e545027100b932fd8dd104e86cbdd42c16f8794b0e","sha512":"d4394e93115cce1527ba9d0285b44fbc04d4235e764440892f5723a0267d05a7211270a85e3499b7296ad223c1522093cf2a14b1e3918188b5fccdd225027368","ssdeep":"384:w9ABgsEWPrMA4bGp0qbzoi74/SMJJplaevN65:xih2IA4ap0qPr4KhM65","tlshash":"f06229a4336ab07307999065407b1109f27d5db4188e4aa4f226ec9f3d6dd0a87f3fb8","size":14573,"data":"","first_seen":"2025-04-03T19:26:21.626861Z","last_seen":"2026-09-13T13:14:57.632621Z","times_seen":6045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","size":844493,"data":"","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-12T15:15:59.780262Z","times_seen":6768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-13T13:17:26.159453Z","times_seen":518474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc01c134352e59e772bd479da5c29da8","sha1":"f88a132c09e10c47074a79b4f01c7b4ffbf3fbd4","sha256":"65ca4b959c625984071502f4b6f24ab89039481a4e87b8e5bf32c662763b4de2","sha512":"728e3ba569686fb81408b64763532304669b5d17d4853cc36f1a75e25952c3092e68c8d453632ccca65b57af1faaf999ed55aff872f77e3762e9792b198c9eff","ssdeep":"768:PRPNjfxt86KrsVKqQUtVbJcQMcHnf/UOSeQfsdo:P9pxuAVPQUtcQMkf9JQr","tlshash":"b3f28d4dec05743bedfe4be22bd0629469bc419e468e11ac61fe05d316b39d7668b0cc","size":36102,"data":"","first_seen":"2026-09-09T07:02:25.290007Z","last_seen":"2026-09-09T07:02:25.290007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026bft=0dAFcWeA5KNlt7DwB5_SzWFRkdaGTf14ofg5P9ldjVQKnufXNmNkoQP_7AGLs1HwbhOJ03zokmNnHKQcxosFO0lftssRUfExPC2w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-13T13:17:26.159453Z","times_seen":518474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026bft=0dAFcWeA5KNlt7DwB5_SzWFRkdaGTf14ofg5P9ldjVQKnufXNmNkoQP_7AGLs1HwbhOJ03zokmNnHKQcxosFO0lftssRUfExPC2w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9e2f59dc3cf73a81b1ca3a0e5a40f90","sha1":"255d90475855e9aab909a817a2f5a1a9a0ce8c59","sha256":"dde422e5d091393c7b21324043d03a4201d42504d10dc08cad491ed225a28ee5","sha512":"aae357f584d1bda0575aa539fa4228f4ca8c942d8bc86d8c206f92d2f9beb4aec6606d6c46cd080c79c62fee2701480ae5ef2589cd3f29c95185f18793dda26d","ssdeep":"","tlshash":"a5c012e353091ef64d24bc550835119e5c8a48a3d41797f48be97d1afea0d45b600a79","size":191,"data":"","first_seen":"2026-09-09T00:21:06.508455Z","last_seen":"2026-09-09T08:10:08.307194Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/vendors/js/app.3919c7dd82419f30.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"23e7259ac95021ece03951fc1ef3bf4f","sha1":"cd51dfb29681f0464b92029a99cd662b3e0954bd","sha256":"0fd1347bda373a50659c4d19716c4bf0b4a0fcf7dc6afa7203dcea82a6ba7b58","sha512":"fabc7ea01038f3ac4f237afbdd783a124cee844bad9259caf3974d74a11e7dc43cedcd75ca87a73afafd31329d6f242aa11e0aa977d75981d9d0491312b491a7","ssdeep":"49152:tXl2PK2NmXnUdexkhZjFxzWnOcwj28FhLeagaT08xf/iZKmWwtwIM9RUK5HYBaic:YmXnAxf/iZgHYWnEcFj","tlshash":"db956dc53261b0374bd355e6907a0503a33b6895340d846cb62ce8df7ebd998a27bf78","size":1930652,"data":"","first_seen":"2026-08-18T12:48:55.923047Z","last_seen":"2026-09-09T08:10:08.307935Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"8a4926c35e1da2fd820be78def3ef558","sha1":"598caf385688df918ed770bf52f30e4be0a9c8df","sha256":"33b7926ea401f1fffa38686dfa9896ab5c6b788508e1da41342f1e5c84d251e8","sha512":"38241bb0a8dfbf631c1c67e33940496dec530e5048407a25444d4bc628aab4f9c253eacbe6d3ea0cce7eeaed4bd7ed0078cdd6fd2caf72e14ded39b37428293d","ssdeep":"","tlshash":"73b012232520c8180c010703c86bd3f8e1019028e66090f0c4ad0fdd4530863d011500","size":102,"data":"","first_seen":"2026-09-01T09:18:25.80804Z","last_seen":"2026-09-12T15:15:59.800071Z","times_seen":4894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/5594/js/app.4775fcdecef9546a.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c3903bba36025bffbda7264872d68dd","sha1":"a7e4657ad4b17aa27b963c8b54bddf5661f3b794","sha256":"e0229047505b0fa24212a4748c50819e8684f80831774b1d029bad49efb87084","sha512":"68abc7b8bc135b7702208daeeab3da46fc3871cdd185f4db135b161df751874a29ee3e7b6e7b382d2e08a19b062c6a379c45de4d2c8546830b5217e8108d1130","ssdeep":"192:P1vFffJ0jILYY8oRkmsWcXouefN6mqpGC7xJ8yiEzQmkZsd+LUZU:P19ffJ0jiYmymsWpNfsFxSyiEUmxIUZU","tlshash":"6102e7a461cdb07805ee4dd7a2bf67c177342496f4434156203ecc8e27aace29269fde","size":8734,"data":"","first_seen":"2026-09-09T00:21:06.383576Z","last_seen":"2026-09-09T08:10:08.266425Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/4455/js/app.754bcde377013b91.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b6e2894194d51291ac94f7ad46a2b2f","sha1":"b688a57e3010eaa7a4d295f6d407a6499ef747d3","sha256":"44c9372a6ae1a3b917b6b29906361c692a8f7ebc9f957091a07d60ec211905d7","sha512":"be7f3e87eccf886f7c4072a3ab2db1ec0bff1387e15158178377e2957d837124ee0b0c7033b0bdfcb7750916503ca975ea12bdd11aeaf75dd70520895068adcd","ssdeep":"192:/dlPPO3qTqFYQbFvJ4OlKCT55z6vRQFzIwrGP5P:/XRO+oh4spypQSmGPh","tlshash":"7512996033415df656e7875ad0faa680b1b568daa62a4098733dbc7a013ccdd3231bf5","size":9819,"data":"","first_seen":"2026-09-09T00:21:06.411389Z","last_seen":"2026-09-09T08:10:08.288375Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Swiper Loop Warning: The number of slides is not enough for loop mode, it will be disabled or not function properly. You need to add more slides (or make duplicates) or lower the values of slidesPerView and slidesPerGroup parameters","filename":"https://oslo.textproeditor.com/vendors/js/app.3919c7dd82419f30.js","line_number":2,"column_number":216628}]},"http":[{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/yandex-browser-logo.svg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.035Z","timestamp":1788937310035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/yandex-browser-logo.svg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"1679-1a0621c8398\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 3d533a29ed736a6b\r\ncache-host: yccdn-mar-16\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5753,"size_decoded":2863,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cc1d76620edfdd984be0bdf582bbe6f","sha1":"e19025eaaacfafca726b334e1634d11241a24e03","sha256":"db7819eb7ae8a415ef7b0b4a0f102b1fbad2966f0a66405c3b70e4ece843f200","sha512":"e9f897936075c7b48fbf625ad2faffdb4db9c527ddcc1588ce053fb86de26c659710b5e6c9fd98166a8a8d02d756214e9d4ce1b6de6a9ade33d9e8502142b88d","ssdeep":"96:nnxo9kLVmQuWYRBM8qVEZRQgvbgTZOpHxHI3jHSMz05bRrtYHzLa6hKWyjTqN:nxo9pNHQEZ+tO9xozHv6xtYfaL3TqN","tlshash":"29c11d079300d7aa9ac3d06cde35a0e5361954c6e2fab0dcdaf39b06a44b4f5e634d38","first_seen":"2025-11-20T13:41:34.346501Z","last_seen":"2026-09-09T08:10:08.273088Z","times_seen":94,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/reviews/bg.avif","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.483Z","timestamp":1788937310483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/reviews/bg.avif HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.textproeditor.com/microsoft-word/css/main.c9e4409071fc864d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/avif\r\ncontent-length: 36618\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"8f0a-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: bcfbfdff0bee6397\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36618,"size_decoded":37084,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5319a05cf00a87566c78ef61ec9a77ec","sha1":"5109da0d7f29e9a24fecba322739aad4425c49f4","sha256":"78ddb0f81c7273eff44444543c6a53165def50d646515dc39db37b7f9eb7452e","sha512":"9dbe9f73a2a0a6dd1868ec22e93b75c97d7bffe7f03c64df613e9146a7b919045e9d41ce2334ce078737e250702113cfd68194168484ae63bee4c722d3924f6a","ssdeep":"768:bxHXoZ99uwe4+Eye4jye27zg8CeHAN0ouVW/XxdD7TAZhLNOhaX0:blXCle4+EOl27kGougXxhALwr","tlshash":"3af2f1b0ea50542dd49460bd47667a351533ddd6bac208f0ea2dcf24f1f82e6f8b3988","first_seen":"2025-04-11T10:55:49.93167Z","last_seen":"2026-09-09T08:10:08.279621Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnMK7eQhf6TF0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.511Z","timestamp":1788937310511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnMK7eQhf6TF0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11568\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 07:05:50 GMT\r\nexpires: Tue, 07 Sep 2027 07:05:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 172560\r\nlast-modified: Wed, 10 Sep 2025 16:47:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11568,"size_decoded":12381,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11568, version 1.0","md5":"63e66961c2160119ce55ebba42ac06dc","sha1":"642fc0b1af90f1b3447e3f44fb3297f868f95018","sha256":"567c4fec81ed788416c67049e9471161a5362971b64bc9a2ed7dbec9bbd38cba","sha512":"b2f316281d32bfd649be7d2872060858ee14c27bc243a29cbdac951e59fa50ae94f0f2668f4bc4617603a912496596e27b989991dff578e77c393cc3e3983713","ssdeep":"192:IKmHHFUAO8YtSuAtHRYYZr/ajeaFDuJZcjvF5Dg19bdj3z2YIn1W80JL0:IrlS87hHy2GzVOqd5Dg15djjzI1W80K","tlshash":"a632c0695c94fc3cef1e7a3216ca40a1a9386a0ed773f3b39748b97265456e040195ce","first_seen":"2025-10-01T05:43:36.868362Z","last_seen":"2026-09-13T00:38:50.797677Z","times_seen":28,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":28,"dns":6,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.515Z","timestamp":1788937310515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:35:54 GMT\r\nexpires: Thu, 02 Sep 2027 10:35:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 591956\r\nlast-modified: Wed, 10 Sep 2025 16:47:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10788,"size_decoded":11601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10788, version 1.0","md5":"2504429986fe62f483043d4b1104de8e","sha1":"5c5e7fa0f1c4a9db7410a7dcd7e48a0c77bef95f","sha256":"2ce9f91ccd598790f734442b0a203f4b2e9383ce7789735b4f4e816a7bdc7c53","sha512":"f7439cfab93f1217d8d45dd865a0e3978c4e47617f33049817c26f67501dceee6e1c9c4eab5814131ed1373dd0eab7d350e3b044cf6a827155650d839e19200a","ssdeep":"192:X8k1Xa8VoUHmWcGqF+rK7AOv65moppnRTfPFgUwrrix2sAnoAUJ3h58EF:51XDOQmWw37kfSix2sAn7UJflF","tlshash":"b822c05183d19c8bdc85f87b4d50516ad35602a75fcac1f5e72578489ccb36fea0284c","first_seen":"2025-09-13T18:07:09.162211Z","last_seen":"2026-09-13T00:38:50.83029Z","times_seen":474,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":21,"dns":2,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnZKveQhf6TF0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.528Z","timestamp":1788937310528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnZKveQhf6TF0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 05:47:03 GMT\r\nexpires: Fri, 03 Sep 2027 05:47:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 522887\r\nlast-modified: Wed, 10 Sep 2025 16:49:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10820,"size_decoded":11633,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10820, version 1.0","md5":"9f3a4bf1c75c4f1fd0e31597fc302952","sha1":"c94020bc8547f910508f57a7632e0700acea9cd1","sha256":"7288103d6135200cff7e5ba77383cb2e42dba3f5d35d6063eab9a65a4481c957","sha512":"2a2bbe7777652d6ce1392a354127ac9b3f860e7ecc0f699a252940058f2232009720a78579b0a5deda96c7f79fdf9e6a002b9904783c41b1182bd34f61443c69","ssdeep":"192:GoQkclG87y4ws2UBRHhgbmkyo1JUQ5sXUZ8flnUWCBiqA3FgsGhLkjvgLEVc0EQU:GoQS8u4Ii/ymXoIWUOiJ3ByLkm0EQsq4","tlshash":"cc22df99d5b06a7413dca631aed1c21aa03a56701e42f07e4f4cf7286ac31bf744e39c","first_seen":"2025-09-20T09:54:00.992551Z","last_seen":"2026-09-11T11:17:27.264928Z","times_seen":261,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/6978/js/app.0a32f0ee231811b7.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.964Z","timestamp":1788937309964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /6978/js/app.0a32f0ee231811b7.js HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:52 GMT\r\netag: W/\"7e75-1a0621c8780\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b62c0d81094774ec\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32373,"size_decoded":10568,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32107), with no line terminators","md5":"6fa92d02d66d087919b161546f995568","sha1":"cbd49d372ae6d4baea1dfd28656f8127750df41e","sha256":"8171e1317c0acbd0d719e1d77881e2c1033ca35f7d1b45856060b900f6d860d0","sha512":"0ecfc08ff8e0d4d1a5934f0fa1d6b20177f3bba37b1bb922722bc1f717a82a9e65266994f762ac79e539f021f4df5b12ffa33ff32dfd201a0b841743a533a301","ssdeep":"768:FVsLuL+16cjtTL9CS2lXNgv2YoIbBjLFlpcHJVFqFpoCtAru18bmGVVhc+:Qo+wcjtTLH2lElZTWFqFporzDt","tlshash":"b0e209a9307b927504fd469b627d2351f13224597416482cb83cdcce68bce8a73666ff","first_seen":"2026-09-09T00:21:06.403005Z","last_seen":"2026-09-09T08:10:08.262795Z","times_seen":3,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":31,"connect":28,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/yandex-browser-background-mini.jpg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.042Z","timestamp":1788937310042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/yandex-browser-background-mini.jpg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15689\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"3d49-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 42dd1ed4aaf9811e\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15689,"size_decoded":16132,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1424x97, components 3","md5":"07cd0600ed0ae33c6701e16706c194bf","sha1":"528aa04a00a1f2f694238bbe4e617ef3b2132520","sha256":"f3ec273363007860b44e7903d16e9402be25d2767caf146b3d4d98ccb642275b","sha512":"9f8ba498c4ee2c80f89acf18514ea96f057b3c345841d2da2d2a762c36332e81c14306084210d3ee6597ce3d46aee0d960f0dee74bf77c1648c2d4c2652e0d32","ssdeep":"384:YNyqUgC0ZOr+UUxiai1FCr2h1fIbttyj7KFfBf9a8U312Vuf:YNyqUgC95eKh1fIbt0fKFN8eVuf","tlshash":"a862bf1ea6067d30f5d6edfc0ea7c95381115f4a06870ac2b568c9dd38623a3ae2d04a","first_seen":"2026-08-18T12:48:55.813406Z","last_seen":"2026-09-09T08:10:08.281657Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/square-close.svg","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.045Z","timestamp":1788937310045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/square-close.svg HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"c5-1a0621c8398\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 539b658e3fba7242\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":197,"size_decoded":685,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2ece9d54ceacea289ee4d8eebb16895","sha1":"a9b1d3f24236101aaf600f94909ae9577a478f7b","sha256":"c4fc4fd531a7d86683796c8a9164c00cdeadd3249481fd788b7f129938eb754e","sha512":"9877353a45ac4cf3f77fa05bd3c9944a8dc8b9b0b871a1cc08c5b2c285c9dcfa4ec4f69cdbe1f1c29c3f98cf7970076810ef8fdb05a4b6eaa7de4b1e354b8b91","ssdeep":"","tlshash":"49d0223e12084818f3268310d338722422ffb0634ac9208dfe4823306024fabacb32ec","first_seen":"2025-04-11T10:55:49.94321Z","last_seen":"2026-09-09T08:10:08.266992Z","times_seen":133,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnMK7eRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.508Z","timestamp":1788937310508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnMK7eRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25048\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:14:49 GMT\r\nexpires: Sat, 04 Sep 2027 10:14:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 420421\r\nlast-modified: Wed, 10 Sep 2025 16:47:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25048,"size_decoded":25861,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25048, version 1.0","md5":"bb86939d558a23dad2932c9d31e695e2","sha1":"520b4c548eb97bad18c2c6bc682106f25572cd6a","sha256":"00204449031623c1427dcfe782a19a0232847bdb2700f3d5a43a529dc643888a","sha512":"372e8e71d91eb5e20f54f074ef8e4b258b32375c5d56e8673f146ccdbf03201c346ebde8917702849670a235850c0f577dd92f7707920b554e6fa6d22be4554a","ssdeep":"768:zunjDn5g//dom3CYnLaG+uX5GFjITjmI269wiVTYlz:KnjDMKmSYnLav0YMbdwiGlz","tlshash":"ecb2e1da51e8fea1d461e2f412c8ca58c2e1a3e10c2da62f9df8d06d2573dc12e74d79","first_seen":"2025-09-12T05:11:32.567508Z","last_seen":"2026-09-13T00:38:50.769274Z","times_seen":1079,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":9,"connect":30,"send":0,"wait":51,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/logo.svg","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.540Z","timestamp":1788937310540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/logo.svg HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"69dd-1a0621c8398\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 040710f1700cea86\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":27101,"size_decoded":11345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86bcfa014005ff6b5dfbdfd90d253a6f","sha1":"ff4cb75644f485be68e7f396ecd477c125454df7","sha256":"ea12f364a74e28428d2abebe25d968aa030e655fab2ecc4d3735d66921b98b91","sha512":"4b1dabfdbd72728c24d8f23d70acfd99e3f9afa1a8225f5218441f489a37727a8f0dab00dc381d081a804f28a6ad30e22fcc73d7df031c55e494f7807f34fe01","ssdeep":"768:CsMkC80lTwIMYO4g6lFmgxuFO5PZqAcDCyU1iZ:s3I4g6l0gxDZFcDRF","tlshash":"b2c274de9be523f8f002f3f1d8124165ba4f38fa3756cb75c3405e92a95206d948ac9b","first_seen":"2025-04-11T10:55:49.898706Z","last_seen":"2026-09-09T08:10:08.268951Z","times_seen":16,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","date":"2026-09-09T07:01:51.528Z","timestamp":1788937311528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135284\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-12T15:15:59.780262Z","times_seen":6768,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/vendors/js/app.3919c7dd82419f30.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.962Z","timestamp":1788937309962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /vendors/js/app.3919c7dd82419f30.js HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:52 GMT\r\netag: W/\"1d76db-1a0621c8780\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 6fb99b75b51ef4e1\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1930971,"size_decoded":555108,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63997)","md5":"3072212dfaa04c48ac65ea6239d9ef1a","sha1":"e673dfaa7a927af689125fa15416a07888d9db1f","sha256":"3c6582c6f524f12c17ccb820b4daa4a1e75b39708e4b6218e90945379fe13186","sha512":"e014305280927d3e54eee1800f172593e02fd19729cd80bb51b1ebec6853e3b89f023877c89c405cacb927415396cb9890cf5e57cb1ae5311ab2f3d59b87d00e","ssdeep":"24576:+qXl2PK2NJAXnUd7CxkOgZjFxzWnOcwj28FhLeagaT08xf/iZ2:tXl2PK2NmXnUdexkhZjFxzWnOcwj28Fv","tlshash":"d2257ed53271b0374a8355d6907a0502933b7c96740dc56cb62cf8db78a9898f2bbfb8","first_seen":"2026-09-09T07:02:25.250189Z","last_seen":"2026-09-09T07:02:25.250189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":32,"connect":42,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/about/1.avif","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.542Z","timestamp":1788937310542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/about/1.avif HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/avif\r\ncontent-length: 20541\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"503d-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 87ab9203d648743d\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20541,"size_decoded":21007,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f7f8aec6a8191cfbaeac624615542da3","sha1":"06bd7283a489a5756b5ccfb43c1f8040c4b52ded","sha256":"9b90ed0f6c9d3b139452bd65bf51c5c93b61e58efc3bcb0d86aef5601819fdd6","sha512":"b695c42fe23efa8a4bc42ad01d36f2a207369012cac4cbd110b56d57c22a0d8f4a7c4f28b25879cde93be00554a9144fac50fa4fb2491134c069a777be35dad5","ssdeep":"384:rXg0X8tG0+DPNwvvW4wbEKK247W56jZxqFKBl0qd0YS2R8:ke8U0IpjbI78eZxqFalkd2R8","tlshash":"9392d092ceb3bb22c10e9bb6d5525f7eb7c01818723c63509e6f9885381a58d5b58eb0","first_seen":"2025-04-11T10:55:49.906865Z","last_seen":"2026-09-09T08:10:08.271004Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.142Z","timestamp":1788937310142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Montserrat:400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.textproeditor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 07:01:50 GMT\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":1321,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba9b02c400b0c4bbe374b3c0867dcbdc","sha1":"53e074fc58e025847cab9e65083ed3d1ab6c94ec","sha256":"fea970f7997b0a11b97e45ceab613c64d5604ec0a004dc902359e6c12e4a55c4","sha512":"428b51528d83cc1ca55b7833dae267dbbc5d820b78452ecbe7ae62288dae0bb03365acdf4701b065316a236ff5aa0ee9f6261547073362e1addfb3a2d1053c87","ssdeep":"192:YRo7TbOmupRS719Ocu6RB7W+OjuTRU7XPOKu8:4Q4ajdfMh","tlshash":"72f1ac91105ba500e6472cc923cf7e26dd4e61627494c579bffe2ca8adeac224325b3d","first_seen":"2025-09-05T22:49:21.328616Z","last_seen":"2026-09-09T08:10:08.279109Z","times_seen":435,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":37,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/benefits/bg.avif","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.481Z","timestamp":1788937310481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/benefits/bg.avif HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.textproeditor.com/microsoft-word/css/main.c9e4409071fc864d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/avif\r\ncontent-length: 100078\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"186ee-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: e59e0ef5df483a79\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":100078,"size_decoded":100546,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0386154d071a5976cc8e606a5dc10ca5","sha1":"4f63dfb81d76c91233bc039387b5df33e8cafb51","sha256":"3acac939164a9de18d52c116c3769ec9bc85df7da5d2f947a129724db862720f","sha512":"6c8c85a69589816e1e0d10a124280f2b68ec570415c192e34178c659163f00fecff73fe36642294244a561b476605e6780073e12e19ac5b8b7ebfc6d889b0837","ssdeep":"1536:+U9Ko+II6I6+d6SzvP5w/RTeDIycRxT0cVJ42Ir/iTCoPWzv5/1LVERgUbm+I29Y:+D8MQSzpw/R2Iy4B02K/WCdzvB4I+IYY","tlshash":"68a312ad94ffff7e9f6d54a1038646b3469ac6d9bf64e03113344a50091130e266ebcb","first_seen":"2025-04-11T10:55:49.929442Z","last_seen":"2026-09-09T08:10:08.277559Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/css/main.c9e4409071fc864d.css","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.969Z","timestamp":1788937309969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/css/main.c9e4409071fc864d.css HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:52 GMT\r\netag: W/\"10284-1a0621c8780\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9451d9c55f79623d\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":66180,"size_decoded":12937,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (62119)","md5":"e7fbcc39fbcdf1d7b1913fb75a36ca4f","sha1":"912e93993736af870edf87e2bba7302bc022584f","sha256":"3d747f3c0d08e2cbf6990ffe35ad741d245d4c900e64768bd580c00af32dd125","sha512":"9dd85aa10a86cb640103a31048c0b39a24da7f222af80d5c6a38fd5169887e0b7daa3ac236079208aadfa910208992a6a26843a7e13ba48841abacf3ece0dd64","ssdeep":"1536:DQrv+cJaluwrg1T/Le57DIkC71XCYeMkpEYRaArg:LY","tlshash":"365395a04d783139776fca637d81bd99b114c603e6338baae46ea52cc2ce59705f234d","first_seen":"2026-09-09T00:21:06.47759Z","last_seen":"2026-09-09T08:10:08.27677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":26,"connect":28,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/?os=win11","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T07:01:29.130Z","timestamp":1788937289130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /?os=win11 HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1e40d-puWyGZYqO3OW215efRvjwTDyMTI\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 4b92099a2bd5bc15\r\ncache-host: yccdn-mar-16\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":123917,"size_decoded":18076,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53537)","md5":"08e3c5e985bf3fc447c57ca3e57b8d36","sha1":"a5b95292dc1af4aa8410eaf49cf3797f8f78625c","sha256":"ee1a5151454771533fc0d90fac4bb6c0dd834136ab31aec1bbeaab01fcef9dff","sha512":"5f9bcd1b5d51c7f90e21b8ba64f6ab27b12787eb7f56599311a63d1b7a87c31d62b768486e1a182cef159868460a54fd318fb6e0e0048e560b8e4707c40a30d3","ssdeep":"1536:gKSzHHXRX8cWSddjcGN9s32oxwvX2/B8L:gKSzHHXyys32oO2Bg","tlshash":"74c324b3804e5c27230751c6ea107b85f49b927fae67c24181fc2e9db3e3996c5216f9","first_seen":"2026-09-09T00:21:06.409305Z","last_seen":"2026-09-09T08:10:08.28063Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41109,"timings":{"blocked":0,"dns":20489,"connect":20503,"send":0,"wait":85,"receive":-1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnSKzeQhf6TF0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.520Z","timestamp":1788937310520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnSKzeQhf6TF0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11600\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 09:33:16 GMT\r\nexpires: Sun, 05 Sep 2027 09:33:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 336514\r\nlast-modified: Wed, 10 Sep 2025 16:46:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11600,"size_decoded":12413,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11600, version 1.0","md5":"f47eca08133e3b43addaed67090ac57f","sha1":"bb5e63341337211e19c2470b22a9dbc99b8cb324","sha256":"7aa1fbcba4dd0a22bcf69dc69040f113b7f593702478234485bcc91c8287e925","sha512":"cd002c391672197579a538c4d941aa4757043808b2c69375fdf96118d915c2172e3b0e1a03c25c15192ae5d7ec2c43d343ba57c4a8467c0a14113faa6802f837","ssdeep":"192:t7uShxkyJfXTlXxXUK69b1uyGcBbtzvrJOA5LhQr4lDiNJIBrLukoAZXk:RGOBkl3Pzvrrho4+Z1Alk","tlshash":"d432c01ab24a747efe5f0eb521f3315d67720a708ed47615cc59e88cd64e505182a17c","first_seen":"2025-09-13T18:07:09.193449Z","last_seen":"2026-09-11T21:18:54.749099Z","times_seen":217,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.524Z","timestamp":1788937310524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24056\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 03:23:43 GMT\r\nexpires: Sun, 05 Sep 2027 03:23:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:44:38 GMT\r\ncontent-type: font/woff2\r\nage: 358687\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24056,"size_decoded":24869,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24056, version 1.0","md5":"9410bb8f89e52fc8df5f0aca7009947c","sha1":"baf07be04096a69d066a14650b2d9f71190c19c2","sha256":"88d3e420adee3fa99ae50c15b123e3c9a07ce0ec0c03a01bd6bdd5232822da28","sha512":"ae8646b19460666b286747cb8edffdac031082bf92ef3225f75f32cd409808d3d2dc130276ef539abd4bcf0cc74398a4edee29f4df5273228e69d95e17708c0b","ssdeep":"384:JMQ78ycrtTVYR5eWs0ixye1yzrKQoOiVOQLQfXeGZOvejd50GBFtEhJ2fVLK9TJ7:JoycJO2WxUwzWrh3QfX1yejdJBFYJ2tE","tlshash":"c9b2d1b872764f5b8f478bb10f1239c0b700cc39a86499968cb97173153bce312a6d8a","first_seen":"2025-09-12T04:31:37.633275Z","last_seen":"2026-09-13T00:38:50.806091Z","times_seen":3779,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":44,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/favicon.svg","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.707Z","timestamp":1788937310707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/favicon.svg HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"af7-1a0621c8398\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 96c795a77e7f25f2\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2807,"size_decoded":1676,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c6e1e7fb6a5993437a5afbac41ff335","sha1":"dfc2036b4dfdec02ee86ed8cbe691cf79660b2c9","sha256":"63f144b3ff9b876f93950f81d8deafc7925f9c867bed6b10b7bb3ac26aa27143","sha512":"4012cbd27686672647119a82714938ec8824b064a51c647d24218e94dd425defe2637c211138e8493e23eae3cbfd65aa3f61b60574ca088d09a330bb582c518c","ssdeep":"","tlshash":"6c5164e963d974b59044c384db2eea36b13926faf1b243ccd2d0bf259a0948f5c0cc90","first_seen":"2025-04-11T10:55:49.947939Z","last_seen":"2026-09-09T08:10:08.28261Z","times_seen":16,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/about/2.avif","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.713Z","timestamp":1788937310713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/about/2.avif HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/avif\r\ncontent-length: 18797\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"496d-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2c4f7ca8bad5a329\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":18797,"size_decoded":19263,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e0bba2fab922997f5414a9ebc1712746","sha1":"e1501f50a2a183bcce47be374fdb279c2ed01ae5","sha256":"5244049535ec9dab0d310a8aee4d37a5c9a5f4a7d119039c496c968aab4f14c2","sha512":"5294be84fee299dc07c550f0454fc1b6b41f9550e2be48327bbbe3f2181c66916e455d0ce0a06a162732be92c4de77edc6ff8e74ef787dc434dc6e5305b1d90f","ssdeep":"384:rO+L4nuWHL2RkGeTY6O1a+OQzWz2emmaXrTrHDsBNTbgivrHb8bTg:KwLyCoTY6cOOWz2bvDssivrHow","tlshash":"3882d04522284bdbe58383b3084606e54c639936b5687981ce668b2ea7bd3830b53d7f","first_seen":"2025-04-11T10:55:49.900345Z","last_seen":"2026-09-09T08:10:08.275124Z","times_seen":14,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/js/app.cce87e481d207619.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.968Z","timestamp":1788937309968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/js/app.cce87e481d207619.js HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:52 GMT\r\netag: W/\"11c1-1a0621c8780\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 112abf93d1bbd0c0\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4545,"size_decoded":2426,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4545), with no line terminators","md5":"d7ad1351803d2dccaca17ca577905440","sha1":"2a905f2c91af82a8e0df7def08979956864cb176","sha256":"130d205e8b1d60362bad62ea6818a905189cf79e926d84a33656a34d245c2dd3","sha512":"48031b8208ad800c22164b58f0cc3c4da5a50ac598cb396d94639961e79500930599f4dc3e4933da691947f36d822e950a3bf58672fdab5f8b642bad304ccf1d","ssdeep":"96:2cJdo52QpRAyHB4ZwMXiyvIYFVCsDTxYZFPcc+M:2cJdo5pXjHB8w4ioImDGgM","tlshash":"4c91f8203098bc7801f76a50b82fe882767230e5409f9120f0bd94ae1f7e1d911b1ff9","first_seen":"2026-09-09T00:21:06.394897Z","last_seen":"2026-09-09T08:10:08.287272Z","times_seen":3,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":28,"connect":28,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/top-right.svg","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.015Z","timestamp":1788937310015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/top-right.svg HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"2de3-1a0621c8398\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 05c9e74790fee7cd\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11747,"size_decoded":5237,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6afe78934aa34109ee7f68c60bcb4c9e","sha1":"1681799cc4bdd79b9175cd588f5db8816f9d1304","sha256":"b34551e73c08e77164c36668e257f386e44734ca26d049ca29c5789ccd981efb","sha512":"e7bac1f638ee2ed5dcad5cd8c7f26591f09acf81136015b6c422921413b1c5b41d7ce94abe8fef4aa9c6b9c5d0efdc624590454f17fb773da1c6cee11d679dea","ssdeep":"192:nzILqRWbBqWO+wkxKFxJT6/F9JCx/5iwv1V/9a6kuft2EFyz/IqpGPmifIKaRh:nDREBqh+wzFxJm/Ex/5i+sRitLKRpQDk","tlshash":"9732a6cd33299afcf505e2ff5653202c3c40e8eb7e419465c3b65e1ae8498449daace7","first_seen":"2025-02-12T16:54:43.475259Z","last_seen":"2026-09-09T08:10:08.278059Z","times_seen":133,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/opera-browser-background-mini.jpg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.043Z","timestamp":1788937310043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/opera-browser-background-mini.jpg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23555\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"5c03-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5d55c86b6a0380d9\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23555,"size_decoded":23998,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1424x96, components 3","md5":"d280d1bb4a7b1dc5dfbe4db483eb8a96","sha1":"c345dfe4a6331f1a139f89cd344ae789b37ec2f9","sha256":"b5cc60c19d6305614904f7150d358f5616378578f2415d5407839e2e26e80e89","sha512":"3b4c75c08fbc93f36ccd2dcf2e7956637da20bcd487ae25f3c1dc460702d70be36d3303da242aad61f8ef4506a688b7e16893748c7619f167c335297405d30db","ssdeep":"384:YuI5+OX70Ag3jDOKut6dsOMsBCTAZYaV9YJCXatSxaElGgmh2cOuCknQItoSSmxH:GZIbvutGskbAnIGB4cOuCknZtoSSmxN5","tlshash":"e2b2df683c877d05eebccc7079efda633fa139139803a841dca490c27b952757292ad8","first_seen":"2026-08-18T12:48:55.817126Z","last_seen":"2026-09-09T08:10:08.264325Z","times_seen":5,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/4455/js/app.754bcde377013b91.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.966Z","timestamp":1788937309966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /4455/js/app.754bcde377013b91.js HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:52 GMT\r\netag: W/\"265b-1a0621c8780\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 59c5e6410f237baa\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9819,"size_decoded":3340,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9639), with no line terminators","md5":"5b6e2894194d51291ac94f7ad46a2b2f","sha1":"b688a57e3010eaa7a4d295f6d407a6499ef747d3","sha256":"44c9372a6ae1a3b917b6b29906361c692a8f7ebc9f957091a07d60ec211905d7","sha512":"be7f3e87eccf886f7c4072a3ab2db1ec0bff1387e15158178377e2957d837124ee0b0c7033b0bdfcb7750916503ca975ea12bdd11aeaf75dd70520895068adcd","ssdeep":"192:/dlPPO3qTqFYQbFvJ4OlKCT55z6vRQFzIwrGP5P:/XRO+oh4spypQSmGPh","tlshash":"7512996033415df656e7875ad0faa680b1b568daa62a4098733dbc7a013ccdd3231bf5","first_seen":"2026-09-09T00:21:06.411389Z","last_seen":"2026-09-09T08:10:08.288375Z","times_seen":3,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":29,"connect":28,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","date":"2026-09-09T07:01:51.079Z","timestamp":1788937311079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 23:27:58 GMT\r\nexpires: Tue, 07 Sep 2027 23:27:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113633\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc6f30e40407f1871165fd2607e956db","sha1":"fce2064361e33a584c4b5899d3e96bd8213a320f","sha256":"a75325e8b8a5416d4e63d5905ccd8f6385f0352a1854fdffe1ab2d77dad95d10","sha512":"abf515657741cfac7c5acb3cfabd1aab0d40fdc9299528785745deee769e31bfa8b92718d0b05868d6da92663100c03b8a5e0e729dfa03cf266cdaab40f75cd4","ssdeep":"1536:iA7Rpgh9C9ToL9gTNfWNfK4RxHnHZzhXwWx7W1bx7:iA7ArC9ULiTYNC4Rz9Xi","tlshash":"4c838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-01T09:18:25.804738Z","last_seen":"2026-09-12T15:15:59.776746Z","times_seen":5415,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026bft=0dAFcWeA5KNlt7DwB5_SzWFRkdaGTf14ofg5P9ldjVQKnufXNmNkoQP_7AGLs1HwbhOJ03zokmNnHKQcxosFO0lftssRUfExPC2w","date":"2026-09-09T07:01:52.174Z","timestamp":1788937312174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 23:27:58 GMT\r\nexpires: Tue, 07 Sep 2027 23:27:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113634\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc6f30e40407f1871165fd2607e956db","sha1":"fce2064361e33a584c4b5899d3e96bd8213a320f","sha256":"a75325e8b8a5416d4e63d5905ccd8f6385f0352a1854fdffe1ab2d77dad95d10","sha512":"abf515657741cfac7c5acb3cfabd1aab0d40fdc9299528785745deee769e31bfa8b92718d0b05868d6da92663100c03b8a5e0e729dfa03cf266cdaab40f75cd4","ssdeep":"1536:iA7Rpgh9C9ToL9gTNfWNfK4RxHnHZzhXwWx7W1bx7:iA7ArC9ULiTYNC4Rz9Xi","tlshash":"4c838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-01T09:18:25.804738Z","last_seen":"2026-09-12T15:15:59.776746Z","times_seen":5415,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026bft=0dAFcWeA5KNlt7DwB5_SzWFRkdaGTf14ofg5P9ldjVQKnufXNmNkoQP_7AGLs1HwbhOJ03zokmNnHKQcxosFO0lftssRUfExPC2w","date":"2026-09-09T07:01:52.176Z","timestamp":1788937312176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135285\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-12T15:15:59.780262Z","times_seen":6768,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/opera-browser-background.jpg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.039Z","timestamp":1788937310039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/opera-browser-background.jpg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62638\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"f4ae-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: f8e1e1a62e5160c0\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62638,"size_decoded":63081,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 260x520, components 3","md5":"46768af75de9d497f23281a5b778f6e7","sha1":"8622be56e2b92a644d981e17521a6f3b275fba6e","sha256":"08100a7ee5a5b3182378793ea5dd216f86aa0f9dc66dd517584d87b0d3b5247d","sha512":"af7234eb0fdca3f387c14603cefeecd6845eff50e673790cc3ff51fffef31b15e2f9883c133ecfe0a3be8be80e1c7b6f00a50cb8f3fa09aeb8085510dc93fc2f","ssdeep":"1536:wf3G91K/bS0vbpIaDSb0soilFXetNv1acZpk8:NK/G2pI0E0sJrX2NdhL","tlshash":"ea53f1d5c2471ae256690ebde1c83b9a5460f6aefc6440d5c990c82fce70887b563d8e","first_seen":"2026-03-08T15:55:26.510915Z","last_seen":"2026-09-09T08:10:08.294754Z","times_seen":19,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uaas.yandex.ru/v1/exps/?client_id=metrika.98028480\u0026url=https%3A%2F%2Ftextproeditor.com%2F%3Fos%3Dwin11\u0026i=\u0026duid=\u0026client_features=%7B%7D","fqdn":"uaas.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"213.180.204.98","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.892Z","timestamp":1788937310892,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uaas.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 28 Mar 2026 21:11:16 GMT","end":"Sat, 26 Sep 2026 20:59:59 GMT"},"fingerprint":{"sha1":"CD:EC:AA:25:9A:83:99:CD:FD:4B:66:D6:CB:3B:D7:E0:33:9B:5E:20","sha256":"96:AE:35:1B:5E:EE:F4:72:6F:DB:0F:60:91:6A:22:95:41:C2:0A:94:98:78:D4:2A:D3:75:30:32:F4:8D:76:BF"}}},"request":{"raw":"GET /v1/exps/?client_id=metrika.98028480\u0026url=https%3A%2F%2Ftextproeditor.com%2F%3Fos%3Dwin11\u0026i=\u0026duid=\u0026client_features=%7B%7D HTTP/1.1\r\nHost: uaas.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Ok\r\nContent-Encoding: gzip\r\nSet-Cookie: _yasc=tmcLEXGekA1O0Q2YkCgoQyWg/pl4b7g9cmsdQbDhkuH6szwS8T6/JZgKIbPoWlbm0qz7Vw==; domain=.yandex.ru; path=/; expires=Sat, 06 Sep 2036 07:01:51 GMT; SameSite=None; Secure\ni=EVAoWRhllufMPenbwh1hyb438oyBhgoFbl5oCgym7nBLKIhv5oJDIMqInO8TAuhsPtOndp28mMHlMQuLSI2zwvzg1f8=; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2054572381788937311; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=3274810601788937311; Path=/; Domain=.yandex.ru; Expires=Thu, 09 Sep 2027 07:01:51 GMT; SameSite=None; Secure; HttpOnly; Partitioned\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":[{"name":"_yasc","value":"tmcLEXGekA1O0Q2YkCgoQyWg/pl4b7g9cmsdQbDhkuH6szwS8T6/JZgKIbPoWlbm0qz7Vw==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2036-09-06T07:01:51Z","raw_expires":"Sat, 06 Sep 2036 07:01:51 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"_yasc=tmcLEXGekA1O0Q2YkCgoQyWg/pl4b7g9cmsdQbDhkuH6szwS8T6/JZgKIbPoWlbm0qz7Vw==; domain=.yandex.ru; path=/; expires=Sat, 06 Sep 2036 07:01:51 GMT; SameSite=None; Secure"},{"name":"i","value":"EVAoWRhllufMPenbwh1hyb438oyBhgoFbl5oCgym7nBLKIhv5oJDIMqInO8TAuhsPtOndp28mMHlMQuLSI2zwvzg1f8=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-09-08T07:01:51Z","raw_expires":"Fri, 08-Sep-2028 07:01:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=EVAoWRhllufMPenbwh1hyb438oyBhgoFbl5oCgym7nBLKIhv5oJDIMqInO8TAuhsPtOndp28mMHlMQuLSI2zwvzg1f8=; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"2054572381788937311","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-09-08T07:01:51Z","raw_expires":"Fri, 08-Sep-2028 07:01:51 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=2054572381788937311; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None"},{"name":"yashr","value":"3274810601788937311","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-09-09T07:01:51Z","raw_expires":"Thu, 09 Sep 2027 07:01:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"yashr=3274810601788937311; Path=/; Domain=.yandex.ru; Expires=Thu, 09 Sep 2027 07:01:51 GMT; SameSite=None; Secure; HttpOnly; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":333,"size_decoded":1087,"mime_type":"application/json","magic":"JSON text data","md5":"b0543bf28ff9e34faae83d5f604ebe5f","sha1":"623ae7e06e6f92cf54861c29b38e15be1643aa50","sha256":"4829ee89d169ef1e0a3403d09739b5ffaec5effc17f7759dd7bd138bd915a089","sha512":"c7c5b971c7c34f49b0e3219231df217bd14ec5e243aa1b796d5f0eb144e4d2e5cc06f77dbc98a0da0bde03ea5fbd84785f50bffafd6d6617b5be1a2ace17f8af","ssdeep":"","tlshash":"d9e0c6cc061b8e540243860838fbac2a1b2840aa8b88269a980190aa63d068a036227b","first_seen":"2026-09-09T07:02:25.266157Z","last_seen":"2026-09-09T07:02:25.266157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":1,"connect":49,"send":0,"wait":63,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:51.014Z","timestamp":1788937311014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Sep 2026 07:01:51 GMT\r\ncontent-security-policy: script-src 'nonce-wV8RJaf3NpPqTIBit8nCSA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54588,"size_decoded":29349,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36108)","md5":"f3413d81a8cffb5a75ed943d8259c0c4","sha1":"28e6ab5a89efabd884c5b669b1e1f243c841699d","sha256":"c743d7a149cf76d64353d32afbca82dacbb449c5d4dd02f6093d7a8534440ca2","sha512":"98e897bcf585d77b26b21dfb2b914e01d696e351f5916860e784b88f7f8813cf547a9bfa811cf085ec9f26e825bbab1687f898c02d78daa534057e91a12d9f43","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/NBBq1MFRPNjfxt86KrsVKqQUtVbJcQ9:y+k+BBqMF9pxuAVPQUtcQMkf9JQi","tlshash":"96336b4448075402ead74de223c97f70fe6e8245614a40b873fe17a7aee7c97926a38c","first_seen":"2026-09-09T07:02:25.267165Z","last_seen":"2026-09-09T07:02:25.267165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9E4kDNxMZdWfMOD5Vvl4jL.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.513Z","timestamp":1788937310513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9E4kDNxMZdWfMOD5Vvl4jL.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:58 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592192\r\nlast-modified: Wed, 10 Sep 2025 16:47:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23872,"size_decoded":24685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23872, version 1.0","md5":"d26e1b11589f2c2744eadc0ac2ffae94","sha1":"4e1f0a8ef07782f138d7336b3cc430241268c442","sha256":"3e38d8c01fe97529fbf0a086bf958d724b723ca7fc8be77b4ba5745f6259b6ca","sha512":"da2576aa68565be3b9cba3aa385d346478cf51dcf7b0014bddb5e5b078716e1a5e76e2af239190386559af5ba4ed698e2a411ee19d4a7ed0816a363b02204ef9","ssdeep":"384:DUqVLiC4FUoceXZvdFbdOlzImvufqOFJlnCpqFOjFNJeDzwT4qsq6IICM:pinSo1RdFdOlzImoFap4UNYDu4qsq6I6","tlshash":"04b2e17ddb928543a4b129f19b027cdda153058efa655d673f163961953f22ac8008cb","first_seen":"2025-09-11T19:19:23.887858Z","last_seen":"2026-09-13T13:35:17.192731Z","times_seen":8436,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":25,"dns":4,"connect":0,"send":0,"wait":54,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","date":"2026-09-09T07:01:51.478Z","timestamp":1788937311478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 09 Sep 2026 07:01:51 GMT\r\ndate: Wed, 09 Sep 2026 07:01:51 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8a4926c35e1da2fd820be78def3ef558","sha1":"598caf385688df918ed770bf52f30e4be0a9c8df","sha256":"33b7926ea401f1fffa38686dfa9896ab5c6b788508e1da41342f1e5c84d251e8","sha512":"38241bb0a8dfbf631c1c67e33940496dec530e5048407a25444d4bc628aab4f9c253eacbe6d3ea0cce7eeaed4bd7ed0078cdd6fd2caf72e14ded39b37428293d","ssdeep":"","tlshash":"73b012232520c8180c010703c86bd3f8e1019028e66090f0c4ad0fdd4530863d011500","first_seen":"2026-09-01T09:18:25.80804Z","last_seen":"2026-09-12T15:15:59.800071Z","times_seen":4894,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@17.8.8/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.995Z","timestamp":1788937309995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/vanilla-lazyload@17.8.8/dist/lazyload.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 17.8.8\r\nx-jsd-version-type: version\r\netag: W/\"22d3-9iS/MtftFtnSKrCnrvX4El0GoIk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\nage: 2337481\r\nx-served-by: cache-fra-etou8220194-FRA, cache-bma-essb1270036-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8915,"size_decoded":3855,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8914)","md5":"4437a0deae2d14e7078a5e366f6ccaae","sha1":"f624bf32d7ed16d9d22ab0a7aef5f8125d06a089","sha256":"e40abf3f23b23cb01de7feab31773f2dbf94074cb0fb0feec8de182b1c69efb3","sha512":"4efaf5658d82ff2c46d93df7d9ea119bdeccbfc8bbb501bc925a68f0a09abeeed2da4f94adf4cc4dd14837dae58252cc3de2a8d00dd42ff3e11219f2c2701b22","ssdeep":"192:pDvu5/2Pbu1ZWhbat1oee/9X8UnZEHuuwJgbClI+YkFG/uW1eqa93Vw:pTw/4Dt0+IHHu5C","tlshash":"f00232487946b46b3973f0f6218f02ca353a24526ced6854a6e1f8f82d7858d1863fbd","first_seen":"2023-12-25T14:08:10Z","last_seen":"2026-09-10T22:52:34.772905Z","times_seen":386,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":8,"connect":12,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/yandex-browser-background.jpg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.034Z","timestamp":1788937310034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/yandex-browser-background.jpg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 136130\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"213c2-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: aac2f17bd744404d\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":136130,"size_decoded":136575,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x615, components 3","md5":"b150868c2bc31450e535ceb95222190b","sha1":"aad200447accda9717899999a4e7557553fc523b","sha256":"b14bafea726145f905cbb7c4e3d32ebd80872d51fe5e74d59043b7b43fc23eea","sha512":"1cdd7a3b5ce6710fa113aed141f166760be7360341c28a4fb489b316f7bb868bc6811814f80697099184f25902f2fdfa067998916659ccdc0b185aa895d0e099","ssdeep":"3072:LTAXTPIhB8PMp0knC6eCatj3s8zjxIAgTwf8B6tEV1o0Lsx:LEjPkBzp5ultjc8z9uwf8ku15C","tlshash":"27d3f078fbd3cb86075f154e867e7c7b1ba552e400e90e63021b9e2ea651f31a84713c","first_seen":"2025-11-20T13:41:34.340717Z","last_seen":"2026-09-09T08:10:08.284399Z","times_seen":95,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/opera-browser-logo.svg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.040Z","timestamp":1788937310040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/opera-browser-logo.svg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"1e48-1a0621c8398\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9abdb24b252901a5\r\ncache-host: yccdn-mar-16\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7752,"size_decoded":3729,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c46d0f4b4ab592476e8f8ce67e38e04a","sha1":"9f943cb5eed61c06af42b71f880d28ca3dafe65d","sha256":"1bfd5ad5c7098604902145a4032d53861d34dadc4eb86ddd3a8baea4a461fc75","sha512":"23e36a9213de490fa018b5b01da4dd09d54f2097ba9575feb9090081dd96883a9c00bf53e9354faffe0a3068a407f77632d937ca87175f6ce1c9379529f1b1bc","ssdeep":"192:tJrdCFFoScLtRlRC2m1ouI4MrBoLvZ6Jjoyji:tJrMPqlg770m6y","tlshash":"83f194e5b795a2f0f546f3f1da22f8b97b5734ba3f22c66dc3a54c01791109dda88880","first_seen":"2026-03-08T15:55:26.56739Z","last_seen":"2026-09-09T08:10:08.281143Z","times_seen":19,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/button_close.svg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.041Z","timestamp":1788937310041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/button_close.svg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 399\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"18f-1a0621c8398\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a186290f8eb9fed5\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":399,"size_decoded":865,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6865185f2f958a28a06a1f37e5fd8329","sha1":"e84d60442f02ee500f6ecb4adde7a12cea7b938d","sha256":"1098c54bb39e99b422d1a8c429523aebe511054b4a18bbb2c81a244f49bc511e","sha512":"7b11fc7e82790cb91fdb8544fe3031a9aa6e4bb5267d1a6589d89f8421bf3ca77206994d45180efebab6691570ac831678cd3ae728aee3d169835b1099961039","ssdeep":"","tlshash":"57e02b3fe318972e6c64f754faa44da11674e08000b91150d6e18f404c37371c761d79","first_seen":"2026-08-18T12:48:55.823979Z","last_seen":"2026-09-09T08:10:08.263456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uaas.yandex.ru/v1/exps/?client_id=metrika.72596836\u0026url=https%3A%2F%2Ftextproeditor.com%2F%3Fos%3Dwin11\u0026i=\u0026duid=\u0026client_features=%7B%7D","fqdn":"uaas.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"213.180.204.98","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.890Z","timestamp":1788937310890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uaas.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 28 Mar 2026 21:11:16 GMT","end":"Sat, 26 Sep 2026 20:59:59 GMT"},"fingerprint":{"sha1":"CD:EC:AA:25:9A:83:99:CD:FD:4B:66:D6:CB:3B:D7:E0:33:9B:5E:20","sha256":"96:AE:35:1B:5E:EE:F4:72:6F:DB:0F:60:91:6A:22:95:41:C2:0A:94:98:78:D4:2A:D3:75:30:32:F4:8D:76:BF"}}},"request":{"raw":"GET /v1/exps/?client_id=metrika.72596836\u0026url=https%3A%2F%2Ftextproeditor.com%2F%3Fos%3Dwin11\u0026i=\u0026duid=\u0026client_features=%7B%7D HTTP/1.1\r\nHost: uaas.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Ok\r\nSet-Cookie: _yasc=Ev+TCUxD9Dj0KmqGRjIzertdiftE9GjCBkXE70BTJNn3DYXSEyJA08zdV5OVpJG+1deiGQ==; domain=.yandex.ru; path=/; expires=Sat, 06 Sep 2036 07:01:51 GMT; SameSite=None; Secure\ni=RUT/IS9Af0aeycVKyvfUe7XnzOFU6KOvQk9B5uTNmaNmuoCwuQ/DTt+uM9eVe20MuZWjRzS8uU2ZD+cFCiL5domC5eM=; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8491916501788937311; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=8420937171788937311; Path=/; Domain=.yandex.ru; Expires=Thu, 09 Sep 2027 07:01:51 GMT; SameSite=None; Secure; HttpOnly; Partitioned\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"_yasc","value":"Ev+TCUxD9Dj0KmqGRjIzertdiftE9GjCBkXE70BTJNn3DYXSEyJA08zdV5OVpJG+1deiGQ==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2036-09-06T07:01:51Z","raw_expires":"Sat, 06 Sep 2036 07:01:51 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"_yasc=Ev+TCUxD9Dj0KmqGRjIzertdiftE9GjCBkXE70BTJNn3DYXSEyJA08zdV5OVpJG+1deiGQ==; domain=.yandex.ru; path=/; expires=Sat, 06 Sep 2036 07:01:51 GMT; SameSite=None; Secure"},{"name":"i","value":"RUT/IS9Af0aeycVKyvfUe7XnzOFU6KOvQk9B5uTNmaNmuoCwuQ/DTt+uM9eVe20MuZWjRzS8uU2ZD+cFCiL5domC5eM=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-09-08T07:01:51Z","raw_expires":"Fri, 08-Sep-2028 07:01:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=RUT/IS9Af0aeycVKyvfUe7XnzOFU6KOvQk9B5uTNmaNmuoCwuQ/DTt+uM9eVe20MuZWjRzS8uU2ZD+cFCiL5domC5eM=; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"8491916501788937311","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-09-08T07:01:51Z","raw_expires":"Fri, 08-Sep-2028 07:01:51 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=8491916501788937311; Expires=Fri, 08-Sep-2028 07:01:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None"},{"name":"yashr","value":"8420937171788937311","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-09-09T07:01:51Z","raw_expires":"Thu, 09 Sep 2027 07:01:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"yashr=8420937171788937311; Path=/; Domain=.yandex.ru; Expires=Thu, 09 Sep 2027 07:01:51 GMT; SameSite=None; Secure; HttpOnly; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":173,"size_decoded":952,"mime_type":"application/json","magic":"JSON text data","md5":"de7334f55b869d22388dd3365a4dd1b4","sha1":"94711fbf589bee272006244bc3e8ddd98fa3bdb2","sha256":"c6bd0c78b8aae8c91a53d9bd45e2fd7289fba3e80f1ea9377b19fb2812841474","sha512":"32aa8511641eab969dff849b1612ede3ce82088798a0933b014827bd6918f7ff45fa1e2a31d02277b4892abea5a6ea70cde8155415ac7d8d649df5571d8fd76e","ssdeep":"","tlshash":"6dc0cccc00330ab0320302000ceb2ee8aec0a280ab88200f0a8c823e0300f2b08c2b2e","first_seen":"2026-09-09T07:02:25.271868Z","last_seen":"2026-09-09T07:02:25.271868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":2,"connect":50,"send":0,"wait":53,"receive":0,"ssl":440},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","date":"2026-09-09T07:01:51.355Z","timestamp":1788937311355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 10 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 489089\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-13T13:24:13.52811Z","times_seen":724956,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.544Z","timestamp":1788937310544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135283\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353430,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-12T15:15:59.780262Z","times_seen":6768,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":18,"receive":68,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/api/download-settings?uid=microsoft-word","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.711Z","timestamp":1788937310711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /api/download-settings?uid=microsoft-word HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 239\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"ef-4tGomWG6jMrrVdpahSocRh2IXXQ\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a1fc863599b270b6\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":239,"size_decoded":658,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"18089c023994f9060c71fb1db931a62a","sha1":"e2d1a89961ba8ccaeb55da5a852a1c461d885d74","sha256":"7c90dae18d9c35842b2cb2a236204753217fcfc083774c49ac885b8e85faefde","sha512":"dc6e41700f31e9f6e1e575caadd8b3b43179d446e31b24171ed0c65f79d32c34e6db5d18a05caf21220955c8b5a70e70ebdb5add29ec23baffadbdfe50f25efb","ssdeep":"","tlshash":"b0d09e001d1c3cda1584c58682792e8b903dce32a257352ce241033a29eff785309929","first_seen":"2026-09-09T00:21:06.406398Z","last_seen":"2026-09-09T08:10:08.283093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026bft=0dAFcWeA5KNlt7DwB5_SzWFRkdaGTf14ofg5P9ldjVQKnufXNmNkoQP_7AGLs1HwbhOJ03zokmNnHKQcxosFO0lftssRUfExPC2w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:52.131Z","timestamp":1788937312131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026bft=0dAFcWeA5KNlt7DwB5_SzWFRkdaGTf14ofg5P9ldjVQKnufXNmNkoQP_7AGLs1HwbhOJ03zokmNnHKQcxosFO0lftssRUfExPC2w HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Sep 2026 07:01:52 GMT\r\ncontent-security-policy: script-src 'nonce-CLHtRj9c2WSbGF5G4xltPA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":3278,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"d9a75612d5ec8f73bf27ccd4d63a199a","sha1":"b64b66f09e8940552305927de3af26758f858ea1","sha256":"5bc6d07a9cf7a5f35a0d76a438019ee073caf70d6d3af7a5fb4d4d13a5b19fb0","sha512":"79dea17984cfdcad9c7101473f725506553053e6e7f818abb4a51a967b8d1961a2822ed615be417defdfa6a4c8dafa60955e1c65238805ee0c13b55db3b3234d","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/L:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+m","tlshash":"5c720f50041744009b835ce223ce7f34fe4e92517142d0b1abfdab6beedbda6926939d","first_seen":"2026-09-09T07:02:25.274367Z","last_seen":"2026-09-09T07:02:25.274367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/logo-small.svg","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.024Z","timestamp":1788937310024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/logo-small.svg HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"b07-1a0621c8398\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 83a65ab524205c33\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2823,"size_decoded":1690,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c381c9b091b0fd0bb6474112cdb60d08","sha1":"a56c98e75658cc8bf437238b04d827afa20f085b","sha256":"738e3a2888f407346c53280d52d1e5bf9e22e7b7f172938f3fde32332b598ee1","sha512":"0215706870eeedf66dbb313873b002e0e418ffbbaa2611f0512397b3426f7911a456c2b3769c147cfeaffb2a4066eac484c5799942ffc4b58dcdf8ea522a02a7","ssdeep":"","tlshash":"7451518ca728c3f0bd0ca1dc8e19a95a653a66eb7450c0f5c74a3d2af90d0cf5e5adc5","first_seen":"2025-10-19T14:06:50.243568Z","last_seen":"2026-09-09T08:10:08.27855Z","times_seen":14,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/microsoft-word/img/firstscreen/firstscreen.avif","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.479Z","timestamp":1788937310479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/firstscreen/firstscreen.avif HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.textproeditor.com/microsoft-word/css/main.c9e4409071fc864d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/avif\r\ncontent-length: 80268\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"1398c-1a0621c8398\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 8865ccfc83a214ca\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80268,"size_decoded":80735,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9f98ac9c2d31aa4fccb5d34b9c76337d","sha1":"b2b20d9f4018df391f3c2000225638b9a8c461e3","sha256":"feeab41f805262677c0302bcad7144ca6e645496610269f139f96b6d67f73c33","sha512":"e0c567c9334ea83d1587229ccbebec8f44f890a7d057a37eaaf061850ac41a2f3e8388b7011ef3034f29848d9b6d4c14215b0bd8aa8cb4fe5c90b6f7ff82cd34","ssdeep":"1536:P2JD5LrMdxRu0IWAgX7jxkc2sHizGQcAyOaaUN:PatLrOR7JhrFEsCzPRyOCN","tlshash":"637312b3589b7f27edc55222663b67ab8a8d3e5a146733c154121afc200dd7f7d96030","first_seen":"2025-04-11T10:55:49.946565Z","last_seen":"2026-09-09T08:10:08.265136Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnLK3eRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.522Z","timestamp":1788937310522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnLK3eRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25012\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 17:32:35 GMT\r\nexpires: Sat, 04 Sep 2027 17:32:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:34 GMT\r\ncontent-type: font/woff2\r\nage: 394155\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25012,"size_decoded":25825,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25012, version 1.0","md5":"43eb5ca3942e0f74137d8754629fb9e6","sha1":"df10e9e424a0f840028fe75d99d15775b0384293","sha256":"c753d7153cac2cfeb877264d18f11197ca672d3e04ba1472154a54777a4e354d","sha512":"9efcfdd695c5059ef37e1f95c48ba60f4ef65bb84aeec222a79a8ac6fdff03ad757a1b44959e9648046ee1bbe5c26ca282d1a98c937a8f457ad0b48f09c5204d","ssdeep":"384:OS9urKo7IX4ZLBMEprqwvZNIBZWVu+U3SF5GYz7+LSEaxg2UPGAnZRBMpPPi:Lno7+qLWEFqwxNO89wYQ3GszMVa","tlshash":"40b2e14188f46e81ee96c92154ca6e507cb0315ded2fd324237ee8c6eb87d5074be6e1","first_seen":"2025-09-11T19:19:23.965128Z","last_seen":"2026-09-12T23:52:07.368482Z","times_seen":5343,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":27,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/event","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.710Z","timestamp":1788937310710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://textproeditor.com/?os=win11\r\nContent-type: application/json\r\nContent-Length: 64\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"eventType\":\"view\",\"uid\":\"microsoft-word\",\"route\":\"/\",\"utm\":{}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 618280d98b82c914\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":412,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-13T13:30:53.738289Z","times_seen":379634,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnSKzeRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.518Z","timestamp":1788937310518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnSKzeRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 07:51:31 GMT\r\nexpires: Fri, 03 Sep 2027 07:51:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 515419\r\nlast-modified: Wed, 10 Sep 2025 16:46:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24844,"size_decoded":25657,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24844, version 1.0","md5":"beb3d7395726910999a3b89eb76e9a4b","sha1":"d8874d8b574e66bf2685d14f8aa36bf72feb3758","sha256":"55e09735e30d8492afac5d59ac433c6b367bb7dd00c46e157cfe95c9fb29e833","sha512":"e4033d3c2d06102d587e9206c3e11e7ea11e5fa72aa3d9b381c46415d685dd3fc64e4ada2fa4b88ec65d74890f912763004dfdf8943dd00740aab9e6adb8ffcd","ssdeep":"384:sZAnNn9nLqJQh+hcMBMj3+YlWQ9djLDp2+uQcOaxpE8VP8Sm+EtKob:8e7Md++Yd7jHpYLOa3EAPlm+YKA","tlshash":"1bb2d0814ed67266b199e4bb07441c25ea0b2e7cd56d8f8fce59c6072a918426e08aac","first_seen":"2025-09-12T01:14:39.303969Z","last_seen":"2026-09-13T03:04:13.652147Z","times_seen":3212,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":38,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnLK3eQhf6TF0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.524Z","timestamp":1788937310524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnLK3eQhf6TF0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://textproeditor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 04:25:35 GMT\r\nexpires: Fri, 03 Sep 2027 04:25:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527775\r\nlast-modified: Wed, 10 Sep 2025 16:43:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11552,"size_decoded":12365,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11552, version 1.0","md5":"95a8341a5ba8e3e3d2d1c5126944684c","sha1":"e4b4015cf6e328ee2b789ce3548cf5c338814bce","sha256":"c3d7b0dd41e1723b1ca2ec421e8dedc594e683c3a26bcbb6a9ab2ae1454deaa9","sha512":"7f807afdc5d6087a525918b1f0a1af441a4d326770346f1c087f7fe27812344f3ee94680322c4e83472f68d162758faa9ade80d8994e144d9c51260fe06a6e02","ssdeep":"192:DHzEZQZIAsGW0tbY3YSz2vOZm79gIhfWGsB3TbAL8AvtQpng1BnEdw4jT:DHoZQiAsGW6M3YSz479gIhfyB3TbAL3i","tlshash":"e032cf1a70de57c5f455793ddb8f2fee8cac0b0e69a401c35d4a5b3b90c31aa11848dc","first_seen":"2025-09-17T11:35:55.020189Z","last_seen":"2026-09-11T11:17:27.237436Z","times_seen":285,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","date":"2026-09-09T07:01:51.081Z","timestamp":1788937311081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135284\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-12T15:15:59.780262Z","times_seen":6768,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.textproeditor.com/5594/js/app.4775fcdecef9546a.js","fqdn":"oslo.textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.965Z","timestamp":1788937309965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /5594/js/app.4775fcdecef9546a.js HTTP/1.1\r\nHost: oslo.textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Wed, 02 Sep 2026 12:33:52 GMT\r\netag: W/\"221e-1a0621c8780\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: cac62e5a3b73cc24\r\ncache-host: yccdn-mar-16\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8734,"size_decoded":3406,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8697), with no line terminators","md5":"5c3903bba36025bffbda7264872d68dd","sha1":"a7e4657ad4b17aa27b963c8b54bddf5661f3b794","sha256":"e0229047505b0fa24212a4748c50819e8684f80831774b1d029bad49efb87084","sha512":"68abc7b8bc135b7702208daeeab3da46fc3871cdd185f4db135b161df751874a29ee3e7b6e7b382d2e08a19b062c6a379c45de4d2c8546830b5217e8108d1130","ssdeep":"192:P1vFffJ0jILYY8oRkmsWcXouefN6mqpGC7xJ8yiEzQmkZsd+LUZU:P19ffJ0jiYmymsWpNfsFxSyiEUmxIUZU","tlshash":"6102e7a461cdb07805ee4dd7a2bf67c177342496f4434156203ecc8e27aace29269fde","first_seen":"2026-09-09T00:21:06.383576Z","last_seen":"2026-09-09T08:10:08.266425Z","times_seen":3,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":30,"connect":28,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"oslo.textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:49.979Z","timestamp":1788937309979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 09 Sep 2026 07:01:50 GMT\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":1285,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"a1c0d76690c6e63c02e1798f5ac12268","sha1":"5e0cfb1d22568dd106f8edcdecbb7cfb834967f1","sha256":"706b7fd8b629071c1b9ea78c711a02fe6dfd183fa0574c3325733dfb48bb0df0","sha512":"54e9901fba7650b966e7c6c14453b4e5ed27d7d22c8b90a271157a3f08a4aba6841af11940b9cc93c7e7efc12ceacd2622af2a7da922477a56c0cc209cc2b1e4","ssdeep":"","tlshash":"481121b71a14b0350f7209e1e1fecab5e002701cb11845ece916ce882e79cc7ce11585","first_seen":"2026-09-01T10:31:31.879812Z","last_seen":"2026-09-12T14:23:48.120989Z","times_seen":1106,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":11,"connect":51,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"textproeditor.com/microsoft-word/img/tick-circle.svg","fqdn":"textproeditor.com","domain":"textproeditor.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.037Z","timestamp":1788937310037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"textproeditor.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:33:59 GMT","end":"Sun, 08 Nov 2026 10:33:58 GMT"},"fingerprint":{"sha1":"02:92:0F:35:87:E4:A8:94:95:1F:7B:C5:38:20:42:90:44:B8:B1:F0","sha256":"37:6F:B7:68:63:32:C8:04:6F:A3:EB:B4:89:38:D0:2F:7D:E5:98:5E:9D:B9:62:55:B6:25:8F:6F:1A:10:B0:21"}}},"request":{"raw":"GET /microsoft-word/img/tick-circle.svg HTTP/1.1\r\nHost: textproeditor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/?os=win11\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 485\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 02 Sep 2026 12:33:51 GMT\r\netag: W/\"1e5-1a0621c8398\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5e1f278d4889be27\r\ncache-host: yccdn-mar-16\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":485,"size_decoded":951,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed93153161f00317141d85d6090fdac","sha1":"488c89eb967aa935ec77d1ff6f709ed9b5498269","sha256":"0c74f1679f95f7feeee18cbcf35a73910944aa7056b63932a857293b320a241e","sha512":"4b484007317c976df5a47ffbd82a7b2a1908c0a92c98167a8862c8964d8eaa139e051dc8c3d05710c44856e09a9c8659ab16fb455f4ca32832f712d4ae255461","ssdeep":"","tlshash":"4bf027f6d292dbfdc8824a11f7a47550f0a550d31068c2e4e4f30f8a99298f5a3658b7","first_seen":"2025-11-20T13:41:34.329398Z","last_seen":"2026-09-09T08:10:08.294002Z","times_seen":88,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"textproeditor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Fira+Sans:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.138Z","timestamp":1788937310138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Fira+Sans:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.textproeditor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 07:01:50 GMT\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44465,"size_decoded":2206,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd27867bc331145e59372a20ac1cec8e","sha1":"6f0ac228e5053f48d010a82af8cde33e742a1599","sha256":"36dddccb01209bf7150f8b374398c429a3bc372e3a0a687bd7d9689670fe2d69","sha512":"4d7fb1d38ac5869b82bb29539430c19db17591af7428786ca519879bc0b2d72c4bd2e966bafda045c5118cdf584f1a1bffddfe3ef532e2bfb69ce2d5d8266db8","ssdeep":"384:63rK3U3n3ut3j3n3K1K2QqNt38SNKu/1tfUqrKGHrttkOJK6LBtbw+gK/iqtgHJV:aeo3Yj3TMUGjLnuh","tlshash":"8b13cd90006aa188ea972cc177cf7e739d4ea1162061c4ba6ffd2cd9acd9c36237475d","first_seen":"2025-09-14T00:39:27.383995Z","last_seen":"2026-09-12T20:55:13.772735Z","times_seen":807,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.140Z","timestamp":1788937310140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Inter:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.textproeditor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 07:01:50 GMT\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":2046,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a34f88f00b3b275162b90a5f4166b99c","sha1":"30522f09ae080dbc76f3ad81bbdf542fd8303a56","sha256":"e5e5f92d1543747b23c1658baa72b3bc102fc849e87012e0c8ef182510108940","sha512":"331de80f1de982f363d9777510073861e5337db94b413b26cf0d5038d0fbc3ffc97a9fd031e1f7dd665d5a07368175e4baa1eaf973ed48e0d4e73b3e043c5954","ssdeep":"384:v3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6f01QgTg6NA:/P1AwsHsSXokZIj","tlshash":"8723cd92002be500aa931dc233cf7e3aadce10a97486d5b95ffd0cc96cdad27526875d","first_seen":"2025-09-11T17:19:41.547996Z","last_seen":"2026-09-13T01:15:55.696424Z","times_seen":5169,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":38,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abt.s3.yandex.net/expjs/latest/exp.js","fqdn":"abt.s3.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"93.158.134.158","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://textproeditor.com/?os=win11","date":"2026-09-09T07:01:50.536Z","timestamp":1788937310536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.even.games.s3.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Aug 2026 08:56:43 GMT","end":"Thu, 04 Feb 2027 20:59:59 GMT"},"fingerprint":{"sha1":"6D:2A:08:14:0B:D5:67:C2:05:1B:B5:FB:28:7F:92:7D:0E:E1:8D:AD","sha256":"08:9B:6F:29:17:AA:3C:1B:54:11:F7:14:2E:7E:66:29:04:96:E4:E6:98:60:5C:B6:D8:FB:17:51:23:4B:DB:88"}}},"request":{"raw":"GET /expjs/latest/exp.js HTTP/1.1\r\nHost: abt.s3.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://textproeditor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 07:01:50 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"57153a8b90bf41a3293492eb9b9908d4\"\r\nlast-modified: Mon, 13 Apr 2026 20:48:38 GMT\r\nx-amz-request-id: 63660df0774ea6aa\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=SAS\"}]}\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14573,"size_decoded":6744,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11724)","md5":"57153a8b90bf41a3293492eb9b9908d4","sha1":"ea9e83f87b6c3573d5fc78dcbcdd450898ce059c","sha256":"4776acad9d8c3dd1b75354e545027100b932fd8dd104e86cbdd42c16f8794b0e","sha512":"d4394e93115cce1527ba9d0285b44fbc04d4235e764440892f5723a0267d05a7211270a85e3499b7296ad223c1522093cf2a14b1e3918188b5fccdd225027368","ssdeep":"384:w9ABgsEWPrMA4bGp0qbzoi74/SMJJplaevN65:xih2IA4ap0qPr4KhM65","tlshash":"f06229a4336ab07307999065407b1109f27d5db4188e4aa4f226ec9f3d6dd0a87f3fb8","first_seen":"2025-04-03T19:26:21.626861Z","last_seen":"2026-09-13T13:14:57.632621Z","times_seen":6045,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":3,"connect":50,"send":0,"wait":58,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le_RnotAAAAAB5JUEbnLwUbpCL0C-1dsZsFwBUu\u0026co=aHR0cHM6Ly90ZXh0cHJvZWRpdG9yLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hkm4ic786qur","date":"2026-09-09T07:01:51.403Z","timestamp":1788937311403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 04 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 420563\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-13T13:26:45.394576Z","times_seen":989847,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}