{"report_id":"b39f4abe-85e3-4760-b06b-372fb83cc5b6","version":0,"status":"done","tags":[],"date":"2026-10-07T13:19:53Z","url":{"schema":"https","addr":"agencypads.fun/","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"104.21.79.22","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"agencypads.fun/crates/","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"title":"$AGENCY Holder Crates · AGENCY holder rewards on Solana","dom":{"size":63354,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (400)","md5":"aab8995b132974ce507d4526c81e282e","sha1":"1a9862bd5aa53bfcbfef6727be760cb2e8d43825","sha256":"7af772f4bcd9d3835575e051b468e5d6c9aa8d950678a17a80ff27ae6d991d1d","sha512":"ef01cd5c0409e7dcab5e5416b4bbc41aa98c751e8f9b2fd61daa90902225bae735f8da05810460a737801b128509ddf2ba740d99effebae57959aa355fab87b5","ssdeep":"1536:iOuTJxGtsPDxS8SIIXEUZQgUwfV3nKDOBFb+aNo:iOWjxafV+aW","tlshash":"69530da2e4f6013b007bd1d751ea8772a9f28617e555014272fc4bb80fdeee0b84b94b","dom_hash":"domhasha1da2bea1737fafc7aed9521c61a510d","first_seen":"2026-10-07T13:19:57.944986Z","last_seen":"2026-10-07T13:19:57.944986Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"agencypads.fun/","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"104.21.79.22","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T13:19:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":12512,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"agencypads.fun","ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-03","domain_rank":0,"first_seen":"2026-10-07T12:53:55.705996Z","last_seen":"2026-10-07T12:53:55.705996Z","alert_count":11,"request_count":11,"received_data":551341,"sent_data":5289,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":6,"received_data":168406,"sent_data":3352,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"agencypads.fun/crates/loader.js","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e2b99783aabc2fe57611beb88471a3a","sha1":"51124ac7f24adb0ada2caef9ce500327d9928daf","sha256":"b95178568b0963f0cb2a1793e28cd10f15d78a9c44806a6b90342845fca28eca","sha512":"3782dff4ebb98d27b056d42fc9b2e35d08eb14201fc0c544ddb0bb650a95692bc5aaa53bad90a7782fccd9ce21f4447361753c49b93f857b98607361644f51ad","ssdeep":"768:ibM/cmsX9nZD8xmVhVLUGKOsALd893v+lt9Eq+l9XiLZJq4gxjbzprrh:ZI9/hVLUGKiL8v+lt9LMitJujtrh","tlshash":"e043a68ebae721324167717c5bbf11547136d0035148c9283eaca2542fe866ea2f7bfd","size":55605,"data":"","first_seen":"2026-10-04T06:22:50.316666Z","last_seen":"2026-10-07T13:19:57.953746Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/js/crate-render.js","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55388b46a8d9717a82e0abcc80f39f1a","sha1":"c51837d44e8168890a868715677618733b5be3ae","sha256":"6623b7a3ccf363e6437932e8aa632a9ef9e9a6b58e520b2cee0df54dd1868da2","sha512":"6a0545efcfb3321771cb6a0c1cfa2161eafc9ae1ff2fdc4865fd30858040027c1eda8516c70be1d6279713e392d72ca5bbe0cc2662c92bcdb7464705f13c88b2","ssdeep":"","tlshash":"81818426ace330a05637e2328f1f9011eae98813924ad901355d97a95fa097493edffc","size":3961,"data":"","first_seen":"2026-10-07T12:53:59.884601Z","last_seen":"2026-10-07T13:19:57.958392Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/js/main.js","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4547e2ae80e5c39b60296bae1490e58","sha1":"631c5d6ff5ddd11ec9351df10a3b7a1179e971d9","sha256":"ddc76f965558714382a78f9f1d7a8380cc531e92ec94b48d66a1d754903bf9c0","sha512":"2d0322c9bab7c07cb59865a73a44323fbfdb2d314acc31dd0dbcb33943ebbe7ae5dafa7b2007ed1e8feb751b00d8538f67d852fbd8fbcaf542f3e8b9b1e295ed","ssdeep":"192:jKGu92dQhu9K2ZpelyLUCHdt5rv5dhd8hWr0ATt0D8Th38zSesx8SR5f4pJ4Ot:2GISy8rPhdFQetoY5Kj","tlshash":"e3425f6abde731725877e1b99bbfe248f73600030046d9107d1dca441fa0a365b6eed9","size":12374,"data":"","first_seen":"2026-10-07T12:53:59.889107Z","last_seen":"2026-10-07T13:19:57.952869Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.740Z","timestamp":1791379162740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://agencypads.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Oct 2026 04:34:51 GMT\r\nexpires: Wed, 06 Oct 2027 04:34:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117871\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-10-13T04:10:38.558741Z","times_seen":1375,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist:wght@400;500;600;700\u0026family=Geist+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.522Z","timestamp":1791379162522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Geist:wght@400;500;600;700\u0026family=Geist+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 13:19:22 GMT\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11828,"size_decoded":1520,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e7ad7ed60e5bc777895312888978fa19","sha1":"16776447279f7b8a4f69b57af9076d3a9a58a759","sha256":"45c8c3b8166c2f8e621244466c44be0b1506d3a13dc1081cef2a9b7d75a97c3f","sha512":"120035f937bc88193245e512a71d9a51b01d47160d66c69063e8fb55a550c29fbd9c68840e2f7f8ea9c7b04bea7a5587e82382fdd245a8a1366611881da2920d","ssdeep":"192:btrJqotVwtEJZvt2ptNJgStz6tOJHBtsogkj3Azkt2ygLc3AsLtVy:Z1c+Gz480YAzIA3","tlshash":"3c32cb91045bd400ab931cc237cf7f76ae8e60157444d17eabfe09ecacaac261765b2d","first_seen":"2026-10-05T18:50:55.217562Z","last_seen":"2026-10-12T22:28:38.500906Z","times_seen":20,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/css/base.css","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.524Z","timestamp":1791379162524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/css/base.css HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 02:16:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUq3kGIZMkdiGSKTBHrFgfmLQZHhyu7M9tPu3x3fFlZtPCI6Jtnl%2FXGRpXTNa8ZPxm3Tl28bqcj%2BtWlRK2KQ%2Fgqm6POz8eEBp%2FZjGpkCIJHC5NsdbjP%2FdEF5Gz5NtLYjZw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ac0657e-2c15\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3275ca805689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11285,"size_decoded":4497,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6631221130ff9b79bab7b9cabe28c64d","sha1":"40fc4d9856751f2e2b32744604a32a609692db63","sha256":"1fad15a18827997ddf1e609a62e69d2532b5692983c4947086d1ad995efd9187","sha512":"e0c9fe1a757acbe078685c6d72d1c5dcdbf07b3837392ff365a530de4491a245494c1bb584d53c7349cc161c8040fba8c80d1348ecfb5f707385be5e18bfa507","ssdeep":"192:zi1bBO51NDHUaY5bLI0DWBcopGLZ54Wl2WaoFswX:zi1bBO5b0aY5bLI0DmYZ5A32","tlshash":"493233527f2061b0baa7ea2477c7f75ef328741258055b7cad961008c9ce3b8169e789","first_seen":"2026-10-07T12:53:59.879942Z","last_seen":"2026-10-07T13:19:57.949339Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/js/main.js","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.529Z","timestamp":1791379162529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/js/main.js HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 03 Oct 2026 05:00:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgATU3xTObGRPmne1m%2FJpRTTiAARJFbw1PYUgsHXoy4weO87JRgopQa5Ov9XglhkKyiFg0Y5eenIOjqhC7hyQwvvcFlJUx23onDXIhaW4d03slU2SMFRIiz8YnCxQaP1mg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6ac08be6-3057\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3275da835689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12375,"size_decoded":5263,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f4547e2ae80e5c39b60296bae1490e58","sha1":"631c5d6ff5ddd11ec9351df10a3b7a1179e971d9","sha256":"ddc76f965558714382a78f9f1d7a8380cc531e92ec94b48d66a1d754903bf9c0","sha512":"2d0322c9bab7c07cb59865a73a44323fbfdb2d314acc31dd0dbcb33943ebbe7ae5dafa7b2007ed1e8feb751b00d8538f67d852fbd8fbcaf542f3e8b9b1e295ed","ssdeep":"192:jKGu92dQhu9K2ZpelyLUCHdt5rv5dhd8hWr0ATt0D8Th38zSesx8SR5f4pJ4Ot:2GISy8rPhdFQetoY5Kj","tlshash":"e3425f6abde731725877e1b99bbfe248f73600030046d9107d1dca441fa0a365b6eed9","first_seen":"2026-10-07T12:53:59.889107Z","last_seen":"2026-10-07T13:19:57.952869Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/loader.js","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.531Z","timestamp":1791379162531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/loader.js HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 28 Sep 2026 13:54:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nu9pOKv55KFxOL3YgHAjJH8bFQ2CTtXEDStwQJHvkQUqiw%2BNUgePrGD5I8Lv5EREAYAYaNYH%2B6yTFyeVdsM%2FA7MAwkFwgzWjD0WmhCm%2FJsbZ2b00q4SBsvhwK9wbfd0deQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6aba719e-d937\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3275da855689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55607,"size_decoded":17716,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e2b99783aabc2fe57611beb88471a3a","sha1":"51124ac7f24adb0ada2caef9ce500327d9928daf","sha256":"b95178568b0963f0cb2a1793e28cd10f15d78a9c44806a6b90342845fca28eca","sha512":"3782dff4ebb98d27b056d42fc9b2e35d08eb14201fc0c544ddb0bb650a95692bc5aaa53bad90a7782fccd9ce21f4447361753c49b93f857b98607361644f51ad","ssdeep":"768:ibM/cmsX9nZD8xmVhVLUGKOsALd893v+lt9Eq+l9XiLZJq4gxjbzprrh:ZI9/hVLUGKiL8v+lt9LMitJujtrh","tlshash":"e043a68ebae721324167717c5bbf11547136d0035148c9283eaca2542fe866ea2f7bfd","first_seen":"2026-10-04T06:22:50.316666Z","last_seen":"2026-10-07T13:19:57.953746Z","times_seen":4,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/assets/logo.jpg","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.537Z","timestamp":1791379162537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/assets/logo.jpg HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 02:09:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZYq5pHQLYinVHZIOaVECSpzXG78TLVmBHpoUW7%2Bq2fhK34M1R6%2B8RkfcV3p6sIn9anMH91WQMQibBWRFnKVicR7VU5%2BFyBi%2Fz0Q%2BgAh43zovZJ%2FJKwdtkY4gGp8t%2FimHA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6ac063d2-1f476\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3275da865689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128118,"size_decoded":127674,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"a43c4e166874874a5ba2bf1619307c49","sha1":"0bef953febb2fb2ff1f0669e21ce286092566a6f","sha256":"7089edd874b2fa41a9eb1d23515db7f659b55c24b89b5844df9ffd5db1976093","sha512":"3831e9207fecc62f1f2c29c1478f79278eed28fa6ff4d0e60196d6767af1cefb151e8c3549add9c65e4a9b363cb7dd076b63b0088f02be915364d20646260e52","ssdeep":"3072:cTJ+hSF/7M2Brhe+EX4htPUMhrp/CHb90g22hhZqd1dmNYElbryy:cNMm/7LBvvlab+y8d1w/bryy","tlshash":"81c31223afcb9de32c36206df887afdf221342fb6989068969164340c5e169158dee57","first_seen":"2026-10-07T12:53:59.873182Z","last_seen":"2026-10-07T13:19:57.954561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.738Z","timestamp":1791379162738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://agencypads.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162737\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-13T04:39:44.983237Z","times_seen":7163,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.690Z","timestamp":1791379162690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://agencypads.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162737\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-13T04:39:44.983237Z","times_seen":7163,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":24,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T13:19:21.860Z","timestamp":1791379161860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMEZPUxpUjPEx1WXBApjKgDx7q8W7tQMb0oOSBYWIJe7Ufe8gdMLLSdowtGrQX8so9E%2FKDSSRa3g7mXDvhBKf78ibBpntWk%2FiX%2Bs3kehN8ruDrDymtxNrDcrywMnWiWUhw%3D%3D\"}]}\r\npriority: u=0,i\r\nlocation: https://agencypads.fun/crates/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3271aa195689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T04:31:02.50772Z","times_seen":19071515,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T13:19:21.994Z","timestamp":1791379161994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/ HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Sat, 03 Oct 2026 05:07:26 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUEXhnmesgxF8zm1gNWu088KjGcGEYaaOoOutxshVHfHdtXycvdzT8BW%2Bq9cfhZMtMqvHHVIukTjOslRPyaUph%2BEe7E9Dnc4QCMxT2n3pw5lYEP36jIatgwIDhs328zSag%3D%3D\"}]}\r\ncf-ray: a46d32727a2b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50390,"size_decoded":12096,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (400)","md5":"58b4779b6d41cba697a2a2a3dcb5ac94","sha1":"3f20d4dae4821aba0f123c530520463f5e317364","sha256":"76991561253cb79ad0b0b563eceaee471321c7bc91200f78a6463011336a6f7a","sha512":"b6efce0cad420a5cd087882c5a25659f82d8c9cb19234a739375b3d49c3f5149c28e05b424bfda1c4263474ea5ee52a80ac327fdf177c3808a05b0b49e15abf1","ssdeep":"1536:e8TJxZUsPDxS8MIIXEAzoQgJNfV3nKDOeFb+aNI:eI7xcOfq+au","tlshash":"0233a7b2a8f103b30163d1d665e5a7a7eda78107ca15104177ac0be40febf95a85f18e","first_seen":"2026-10-07T12:53:59.886674Z","last_seen":"2026-10-07T13:19:57.956949Z","times_seen":3,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/js/crate-render.js","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.528Z","timestamp":1791379162528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/js/crate-render.js HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 03 Oct 2026 02:29:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psrpaxcU0ysqHfYEF6A7VzKWydoVdsU%2FO9nEEJ1uESGLbxBkx4JGuLV22ImWEiz6HAQIYuadIYBkLx08y2mkAH3W5QQLNxWFtKFL%2FpY6HtweY%2FjfXwMojuW2eOVrLiTsLg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6ac0687e-f79\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3275ca825689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3961,"size_decoded":2542,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"55388b46a8d9717a82e0abcc80f39f1a","sha1":"c51837d44e8168890a868715677618733b5be3ae","sha256":"6623b7a3ccf363e6437932e8aa632a9ef9e9a6b58e520b2cee0df54dd1868da2","sha512":"6a0545efcfb3321771cb6a0c1cfa2161eafc9ae1ff2fdc4865fd30858040027c1eda8516c70be1d6279713e392d72ca5bbe0cc2662c92bcdb7464705f13c88b2","ssdeep":"","tlshash":"81818426ace330a05637e2328f1f9011eae98813924ad901355d97a95fa097493edffc","first_seen":"2026-10-07T12:53:59.884601Z","last_seen":"2026-10-07T13:19:57.958392Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.692Z","timestamp":1791379162692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://agencypads.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Oct 2026 04:34:51 GMT\r\nexpires: Wed, 06 Oct 2027 04:34:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117871\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-10-13T04:10:38.558741Z","times_seen":1375,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/assets/logo.jpg","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.821Z","timestamp":1791379162821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/assets/logo.jpg HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 02:09:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hMv2pzOXwLKRS1lU2OQY7GfCNa64z9RJSwy%2FcxjKINVjamDl%2FSv%2Ft4C0KBrmz%2FwsIb1zUiQiLtZbZccXAmt4ynbMu59fSRmvHW6XnVw6hO%2BqUEOf2c3D7DhnP6jbTvpTA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\netag: W/\"6ac063d2-1f476\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3277aa9f5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128118,"size_decoded":127673,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"a43c4e166874874a5ba2bf1619307c49","sha1":"0bef953febb2fb2ff1f0669e21ce286092566a6f","sha256":"7089edd874b2fa41a9eb1d23515db7f659b55c24b89b5844df9ffd5db1976093","sha512":"3831e9207fecc62f1f2c29c1478f79278eed28fa6ff4d0e60196d6767af1cefb151e8c3549add9c65e4a9b363cb7dd076b63b0088f02be915364d20646260e52","ssdeep":"3072:cTJ+hSF/7M2Brhe+EX4htPUMhrp/CHb90g22hhZqd1dmNYElbryy:cNMm/7LBvvlab+y8d1w/bryy","tlshash":"81c31223afcb9de32c36206df887afdf221342fb6989068969164340c5e169158dee57","first_seen":"2026-10-07T12:53:59.873182Z","last_seen":"2026-10-07T13:19:57.954561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/assets/logo.jpg","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.822Z","timestamp":1791379162822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/assets/logo.jpg HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 02:09:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrgXXvpJ8%2FwGKi45kxC8aAM%2B60IMSUjyMglhv%2BxljtqB%2B6kqg7yjdZ9m%2FVYfa9qSKgSVkD6LYcBUmO9F0uYPUJo0uLvbPwDJ8WZvol9ukBKvfy%2FqRGNHSfPwnb4NOdg6rQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\netag: W/\"6ac063d2-1f476\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3277aaa05689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128118,"size_decoded":127675,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"a43c4e166874874a5ba2bf1619307c49","sha1":"0bef953febb2fb2ff1f0669e21ce286092566a6f","sha256":"7089edd874b2fa41a9eb1d23515db7f659b55c24b89b5844df9ffd5db1976093","sha512":"3831e9207fecc62f1f2c29c1478f79278eed28fa6ff4d0e60196d6767af1cefb151e8c3549add9c65e4a9b363cb7dd076b63b0088f02be915364d20646260e52","ssdeep":"3072:cTJ+hSF/7M2Brhe+EX4htPUMhrp/CHb90g22hhZqd1dmNYElbryy:cNMm/7LBvvlab+y8d1w/bryy","tlshash":"81c31223afcb9de32c36206df887afdf221342fb6989068969164340c5e169158dee57","first_seen":"2026-10-07T12:53:59.873182Z","last_seen":"2026-10-07T13:19:57.954561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T13:19:21.464Z","timestamp":1791379161464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fk224F2qPQGEXW23WvCHPljYu1dgT2NFi6wTDu3%2BfbiUVjGQghWSxPswo8JzluRO4jgqk%2B9yRrDR%2Full3IFHxRGglG3Ixzk8cw4Y1sh09TDTBghFwwsb%2BsWqpCW8T0TLlA%3D%3D\"}]}\r\npriority: u=0,i\r\nlocation: /crates\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d326f79e55689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T04:31:02.50772Z","times_seen":19071515,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":24,"connect":19,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agencypads.fun/crates/css/sections.css","fqdn":"agencypads.fun","domain":"agencypads.fun","tld":"fun"},"ip":{"addr":"172.67.168.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.525Z","timestamp":1791379162525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agencypads.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 01:53:42 GMT","end":"Fri, 01 Jan 2027 01:53:41 GMT"},"fingerprint":{"sha1":"18:E0:25:40:1A:0F:D9:EC:F7:4A:B7:CA:7D:59:54:70:04:33:48:EE","sha256":"B4:B0:21:68:9D:0D:FC:6B:00:D6:A1:BA:B4:52:BD:25:7C:87:F5:C3:60:23:6C:C9:88:1C:32:CF:4B:99:09:BF"}}},"request":{"raw":"GET /crates/css/sections.css HTTP/1.1\r\nHost: agencypads.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://agencypads.fun/crates/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 13:19:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 02:30:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRKR%2B1MiacfWA40gIax%2FyGItdoohp9sLTU%2BZSKIQhpD61W6FtNEp33yKzY%2BicBFRwJ3wJFdkFQUTSkC9XvRpRMOXkmIzrtzUD0jNAFoKBWTLg8%2F342XmDZD0BV7xRxakkw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ac068d8-648f\"\r\ncontent-encoding: gzip\r\nage: 1563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46d3275ca815689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25743,"size_decoded":7499,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"2c5bcffb5c09d8d855947fa67f72989d","sha1":"a75a63099c8a9685347233fc4ec915d9a05a45c5","sha256":"3853f4c75f31ee64416a2efdeed5d5a664a86e0eb086a3434b619e1983d08c7b","sha512":"86178a73e9c22800f3e88cc153882671f1a35d6ede22d9d1d239dcbb3e16a6e937b38e7b4e60540f29fb8cc6bdaf2623376769a9cf314ddef7ff084c4daa4d9d","ssdeep":"192:Lf+UvRQv5Dhwmjbz76B/EX1gl3ABdq+XCp5r4TRpOMerzvFLcuXltcxLTbDG5VL0:LTvRQvJ3zO5ropOvvl1ax3a4uRzq","tlshash":"84c24367773062b5b9a5ff20b78af79af2457013440d23f89c9a0108c5cd7f9169eb8a","first_seen":"2026-10-07T12:53:59.883193Z","last_seen":"2026-10-07T13:19:57.959329Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"agencypads.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.694Z","timestamp":1791379162694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://agencypads.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162737\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-13T04:39:44.983237Z","times_seen":7163,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agencypads.fun/crates/","date":"2026-10-07T13:19:22.734Z","timestamp":1791379162734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://agencypads.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162737\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-13T04:39:44.983237Z","times_seen":7163,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}