{"report_id":"b4e3c8ed-e505-44f7-80f1-6e92898e11fc","version":6,"status":"done","tags":[],"date":"2026-01-14T14:04:45Z","url":{"schema":"https","addr":"metadao-rangers.com","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"104.21.95.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metadao-rangers.com/","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"title":"MetaDAO","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metadao-rangers.com","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"104.21.95.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T14:04:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"metadao-rangers.com","ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-06","domain_rank":0,"first_seen":"2026-01-14T14:04:46.121947Z","last_seen":"2026-01-14T14:04:46.121947Z","alert_count":16,"request_count":16,"received_data":2352117,"sent_data":7576,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metadao-rangers.com/","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3665a526788d120d07ded0d5b801ab6d","sha1":"1621097ea224b2d93679e5beb72caf2cd87cb90d","sha256":"338fabd11a831a3c39b019263caef0e4188a7b2961ecfb7f889fa4f636b2f43b","sha512":"8b7f59ba25d10a94492b43d6451497f8e00b56710c6c0f282b57a2f8a5282a8459277d7043702b43cef0e6eae618d15c3a62f64d4782e8ce1952e18e69a86eb8","ssdeep":"","tlshash":"a5e05e6824f1566200db683d4acf644e7925e413a1088dcebdccd654afa5e6c10e1948","size":317,"data":"","first_seen":"2026-01-13T14:54:15.02395Z","last_seen":"2026-01-14T14:04:50.090511Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/joi.legacy.umd.js","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72df764ce6514c401f84af63d31d128f","sha1":"9c5971c81ebcc8076d3d30f9602ffcd50600148a","sha256":"796ebccefbd5b3c068332d92e2eff4e069618abf1fdc3753574d0a86d0a16a11","sha512":"5f99d3dc2dd6f6cce5378b61c40582c790a4d17f040f89f849422175ba81304b704708f86531c20f4a8e4ec8b53e2d73d0bce36d3a8dd8c51ff77844f2c85c56","ssdeep":"6144:ckmQ5vWkOx3dp3ub7cDkbLbxhlC7DITjaTiFxpps9/1rub6o6KlwPFTcIVOq18e0:c2W9Nf7A","tlshash":"418443c9b6f2f374917c81834d3a0168e77804f55a82d819ab5db2caf56de7360f28d2","size":385080,"data":"","first_seen":"2026-01-14T14:04:50.072222Z","last_seen":"2026-01-14T14:08:48.556846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e8f512ff419862200904eede4bee98ba","sha1":"82ecf70cca540145a193d607cbd48729918af637","sha256":"d5b743953bd1b1e47d459ea1dee5a87e65bd67e02390bafa751d69dc98a3a0d4","sha512":"32be2bcc8ec22bb514067d753e0f17f7fce021e817bfbc085a9b99a421415397321130032bf95f4d52e2275c3e4b579a9fd654636f8d3bb9011cdc9c3375088d","ssdeep":"6144:kE0kj+D9NnCp72hS1nRxblC1dIlz+DQFjdzCdNZvS3UQ2MzaH5TcI9Oqd4yj2aQW:SZJPVl","tlshash":"b78442c5b6f6f374926c81834d3a0268d73808f55682d829ab5db2c6f56de7360f38d2","size":378129,"data":"","first_seen":"2026-01-14T14:04:50.091266Z","last_seen":"2026-01-14T14:08:48.605946Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02e42e26f2d4efab14905fbfb2978c10","sha1":"df88d0803437644f779e66b901f4fc17228b4c3f","sha256":"b8752c9eee3f04b9ff94552a2d0b7bd69e32ce7435ca3cbd1c7b42db66815f0d","sha512":"b10304fca1385233ff2a446d080a870cf86f68f5679f1b232b3701ae14eb78c7c2bd5a93ac2f74213f458d2f101dee0ec9f33dc32563cdcf1ac764579dec311e","ssdeep":"192:w8kdES6CMz8feKSXCcuUS6C95btjOSI3hrZUMKftymJHvCY:w0z8fm4pjk4","tlshash":"78d16d6d9f92063798abb5bd8f9bb080292284275909ed303d4cd142df8cd3997f6f94","size":6752,"data":"","first_seen":"2025-09-09T17:13:15.573075Z","last_seen":"2026-05-30T00:29:45.391982Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Ftypeorm.debug.js%3Ft%3D29473324%26u%3DpZHkA20hIRW9nvHGGDY5MjU2NDUyMjhjZmYzYzM0MDI3ZWJhZgVHE61GLUuG0ZJ0eQ","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metadao-rangers.com/joi.legacy.umd.js","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:22.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /joi.legacy.umd.js HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: W/\"695d9321-5e038\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MtkhDPxATuZu8VdzSXHeTFM43QQaFDNJalwaqhIYPMG5c8MqAV8qKpm%2FZXKoRtz1DMDlcT5L5rFzMZXWE%2FcGUpRnI3xaEPqvczBlSepdJZghtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddaea2dbee0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"72df764ce6514c401f84af63d31d128f","sha1":"9c5971c81ebcc8076d3d30f9602ffcd50600148a","sha256":"796ebccefbd5b3c068332d92e2eff4e069618abf1fdc3753574d0a86d0a16a11","sha512":"5f99d3dc2dd6f6cce5378b61c40582c790a4d17f040f89f849422175ba81304b704708f86531c20f4a8e4ec8b53e2d73d0bce36d3a8dd8c51ff77844f2c85c56","ssdeep":"6144:ckmQ5vWkOx3dp3ub7cDkbLbxhlC7DITjaTiFxpps9/1rub6o6KlwPFTcIVOq18e0:c2W9Nf7A","tlshash":"418443c9b6f2f374917c81834d3a0168e77804f55a82d819ab5db2caf56de7360f28d2","first_seen":"2026-01-14T14:04:50.072222Z","last_seen":"2026-01-14T14:08:48.556846Z","times_seen":2,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/secureproxy?e=ping_proxy","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metadao-rangers.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 14 Jan 2026 14:04:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9zbDeyeViqVnKl3y1AqfcBmSDKsAGd3rSYVdzRNlGVNXapaX6kcRinR3Z5Ga7E%2BIjTPnwIE5IyJVinqK8NnG%2BbWCzYkcf%2Bf3Mo1FFa6E3pzpWg%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bddaea6cc680731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-13T05:58:08.703701Z","times_seen":9040,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/23081e227a96aa1a-s.p.woff2","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /23081e227a96aa1a-s.p.woff2 HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/d6e06cbbf2c8049d.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41244\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: \"695d9321-a11c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZ06dWeCQiD%2BWQ28iJFnjN4bzMgT7Hiz9QN5yfPv%2FOMxjb02Uw42LCC6dVUvE6tZ7aX2fsdNr4MkMnCTNW7noMlA1snZJXqD7cP%2BgaKXSjy5qUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddaea70c770731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41244, version 1.0","md5":"bb3e12c557b2f6635c42b3fe692616e3","sha1":"fd4cdffd21693ecdc86a791ae0884ff8a7aa3483","sha256":"79d17b52365a2d5bd8995c8c54939d384e9888ed2038c7201fd8d4118d6f0a35","sha512":"1dc445ea862ca8a2c38ea86ae5252b6637fce980ffa96ce65ed13d9bc73e67a2d6b796d71e7fe1d9e83ca7fcb503d0a4fcc33fb59a35a66d6fa8b538c478e725","ssdeep":"768:jQ0k3nWC7xsaS9/H2P+fMPafUl65WYii5m01JPRcnWTKve/Fp63Cs0nC8k:E0iWC7xs3NWmfX8l6db/6WTKve9LCX","tlshash":"fa03f1694d7402f897d145e383589bddf60c653d7ee0a4142d7ba233a98a2cbae79320","first_seen":"2025-09-21T23:17:25.966476Z","last_seen":"2026-08-12T10:41:46.230228Z","times_seen":708,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/public-10.png","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /public-10.png HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 280\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: \"695d9321-118\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcCusjjgRNxNbpLd0xmwW66tyL8bk72hGLjer2Gk63ssDWIzmQhcPVMQVZIdlSNSxmSp4ZT8JQ99Sh1Sv6br18EA8jsAk7M1U49WRWGac4LMQgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddaea74c860731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"d3e76554f4ea8ffde7b300a65c139785","sha1":"8cce145a52a8bcf3803107a83c0a28564e3b5e6c","sha256":"0f77c27e5fc717f928821b22dc8bebbb6d6d2bac0321ac8a9b6efaa8f7a34663","sha512":"fb575273db55ff16d09ec365feefe66027e6c5351cf622078962ac94fdf5aa1d195686f2aa2894c514d729da2663c111f15b98409d76a589c8a97962b3b3661f","ssdeep":"","tlshash":"7dd0e7eb55c42c3495560c7b37dd0d715c8f429c183b01c050f271060812040446c476","first_seen":"2026-01-14T14:04:50.075708Z","last_seen":"2026-03-28T14:28:35.495589Z","times_seen":5,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/favicon.ico","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:24 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695d9321-3ca4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v46zlxaLkgNWAkcxORSLn6onz%2B5AplzEhctp3rFXUUZh9mm3ogPiyGhu7sQPHaqggmxGN%2BLkYR5sNwNlfJTm0Rv5YSJlwv8iGD3ZAp7t0xAMi70%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9bddaea9ed100731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 952 x 952, 8-bit/color RGBA, non-interlaced","md5":"3530d64b29cfa2c4cea0380aab628b80","sha1":"ab43799474b454ca1f2d360fe6227006f86de3d4","sha256":"c1f70852008e0fd5d39bd649db5307f96b13d8eede93d18553e0e64e8946b129","sha512":"a4c51d6ca62ac5123a172b1a3543c165d5ae1d2630519857c30915bcee7bf3fb932bfa2fd559903c22b6f81d815a68462bb406281ab7cedca48a386767565f77","ssdeep":"384:0E7hwVB8NWgHo21uMYDYNvGKSxNbkTMEI7rK/3pQVvNxWDX2:9SX4X4MIGv+xFkQLr/x9","tlshash":"1b62d17e0cab4df4ceac1ab7646d08d57339382ba501c64b74239dba167ac764fd1214","first_seen":"2024-08-20T03:39:56.516578Z","last_seen":"2026-03-28T14:28:35.500897Z","times_seen":12,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com//secureproxy?s=%2Fjmpd%2F","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:25.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metadao-rangers.com/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://metadao-rangers.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-XgYhprINk+MQi+qHv/vohmFx8xw\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9996\r\nx-ratelimit-reset: 1768399525888\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/14/2026 14:04:26\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 2ea5a1c6226bfe2c87ae9aef7a1d0bd0\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDiNr06UeFNC9ftlVxOksmd9cn7YEHxA4DtjxDGwNRLM2nIZ9YVTn4VBJjJfuf6ly3davwF%2FR3TSy%2BZ0tEFTbU%2BbKTu5ttZrZ81xoEoni6%2BPgbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddaeb3ff0e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73395b4e4f729938d90775c7f9f0176f","sha1":"5e0621a6b20d93e3108bea87bffbe8866171f31c","sha256":"82ad99f71a052eb5e379520e29f234e144ad2d3eac8c7747f610544d7d0d74ed","sha512":"3a4e3a3caa3bcfd3e38f6d201658d6e2c093d9975bd501baf2e7a71a57fbe7de905400d17d7130e8d8f21347e5dda7b81935e506e6f1010cdf7d73743ebb0687","ssdeep":"","tlshash":"ffd0234c50d1931809e468da4f550fc75a943f2d3ea221dc3a01fd1202c530dacd5e94","first_seen":"2026-01-14T14:04:50.078508Z","last_seen":"2026-01-14T14:04:50.078508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/public-16.png","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /public-16.png HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 893425\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: \"695d9321-da1f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnhlRobCx%2BypbGp81NtuthgTXuGrtorBngE1YWb7zSnQ7gOR%2FE6Qds3K2ggVTlr1NIuk3IW9Nbl7ZfEBBtZ7cKHHhHGwgQTa9dgH8PdwCbwQB74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddaea6fc740731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1366 x 697, 8-bit colormap, non-interlaced","md5":"59f6c223bc9f06fb6f79bdf4a3410803","sha1":"230a71cc4cbeeec913b26e568a33222248db26d8","sha256":"0435bae44d8661824669ab3469b862820a58f9588eb94ffe92428aa0493797cd","sha512":"e15f2bb0e290d9e119dafb2fa7ccd256f993c39f71f7dd207a9315def35aba6b1ffbb318b139591957dc6fb1da742e1fafe8b901a4989cdf0f16e9b4b99c37f0","ssdeep":"24576:MgLeoyFH6rWyy5eK7jdKOuyisTcxKsWJKRwECtHUxT5:MgKzH6rCeKiyRTcxuKWEClUxT5","tlshash":"3515337f19bd5ed19db213e041db2b8eac4cdc70a6f174681c5e04462a0b6acbacb1f5","first_seen":"2026-01-14T14:03:25.79264Z","last_seen":"2026-01-14T14:04:50.08005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/93f479601ee12b01-s.p.woff2","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /93f479601ee12b01-s.p.woff2 HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/d6e06cbbf2c8049d.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31288\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: \"695d9321-7a38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDISsd8xfUseA2iQgpbDD84ZNVdphbSCrWgu1JKUeu7fjALu7nc79tASseJt6fL3%2BeaIW4TTNrMCnzh9qMtwlkteJTcBKW7BC%2Bb4rzNubfRM%2BvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddaea72c7e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-08-14T06:13:27.886261Z","times_seen":25899,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/favicon.ico","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:24 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"695d9321-3ca4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPRv41n7Fquz1wey88x2eY4kAYSek2gFKBjrg%2FeSRfpaGIeBcZkFvn%2FjBLFgCCqJ2%2BgJ4cwcFgwfXDNqdOyf5wzqjKvWUjPPyDhbEwE4Ow8ecdI%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9bddaea9ed110731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 952 x 952, 8-bit/color RGBA, non-interlaced","md5":"3530d64b29cfa2c4cea0380aab628b80","sha1":"ab43799474b454ca1f2d360fe6227006f86de3d4","sha256":"c1f70852008e0fd5d39bd649db5307f96b13d8eede93d18553e0e64e8946b129","sha512":"a4c51d6ca62ac5123a172b1a3543c165d5ae1d2630519857c30915bcee7bf3fb932bfa2fd559903c22b6f81d815a68462bb406281ab7cedca48a386767565f77","ssdeep":"384:0E7hwVB8NWgHo21uMYDYNvGKSxNbkTMEI7rK/3pQVvNxWDX2:9SX4X4MIGv+xFkQLr/x9","tlshash":"1b62d17e0cab4df4ceac1ab7646d08d57339382ba501c64b74239dba167ac764fd1214","first_seen":"2024-08-20T03:39:56.516578Z","last_seen":"2026-03-28T14:28:35.500897Z","times_seen":12,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/d6e06cbbf2c8049d.css","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:22.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /d6e06cbbf2c8049d.css HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: W/\"695d9321-19ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFze1L3mjvaNWx23IC7YeARaVxxs%2F2wgQ6b2szi6HvTSb805w2F7fV0u%2Br%2F3zx3tN%2BgGndirOoAEHIS5ZDZsVTFn3WYYF9OIKLQcjb38HZQJ7Hg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddaea2dbed0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6586,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6538)","md5":"31a503f6486d54906bc4b128b8a9e8a9","sha1":"f971227c429b67d9cf62d3ba470e30382f9fc2b1","sha256":"be3f21c2d27dd5985c57ded1a7f022820dbd71f3c54d3a0bff09713b0b35e914","sha512":"fdbb0cd55a4bb7b07f2641c29d0d87dcb32b00ab60fbc6c788032bed0c6c69a57dfed988912b03f43048b517c858fba621ad0755e65c6ca44ab40ec7ccf2dce5","ssdeep":"96:jpHH42rZpHG3H4lO65wRx4YpsH4+jRxcqqptzH4YND:xYybG3Yl5CxyYcxWzYYND","tlshash":"d8d1a024401e944ed5b1fc9335ca3f63257e202696d80962ee2d156caeef87773e0b6c","first_seen":"2026-01-14T14:04:50.082495Z","last_seen":"2026-01-14T14:04:50.082495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/ba6d6c8f74d099edbfbe432bb8c987f6c4e1c217.svg","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /ba6d6c8f74d099edbfbe432bb8c987f6c4e1c217.svg HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/ced53ef784030347.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695d9321-9f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AR5PEgqRMXUQJJtvOiOlQXeoJTSYWXmrwKAnmqrZ2gCSjwg3sFf3MRl4%2FiKJE2V5T7r30%2BWKcwXzRgTtcuszVZVEwqE2lgLYJo0do7EaENkFSAY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bddaea6fc730731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d374b1fd39448b03749ddc73408f4336","sha1":"ba6d6c8f74d099edbfbe432bb8c987f6c4e1c217","sha256":"33fc45fc146418a5785ff856a21d4b2c32a8e360e8a14dc90b5436cb71bef0f8","sha512":"0985023d3aee06bff68680c94dda3052941a8ff20438f107b9678921786eb82dbd2817381e753d4bbc70db792b9dc655e8876b455ead24698b6c49c8d9f7e196","ssdeep":"","tlshash":"eac08cb982884a1cc00aa330da78fc29c93bb05033892010c6436324e08866b2ea29ac","first_seen":"2025-11-26T21:25:19.622424Z","last_seen":"2026-03-28T14:28:35.489401Z","times_seen":7,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/4cf2300e9c8272f7-s.p.woff2","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /4cf2300e9c8272f7-s.p.woff2 HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/d6e06cbbf2c8049d.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28388\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: \"695d9321-6ee4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if%2FqYT690XSDOva%2FvId5FecRG%2FnpCvwvOnA00hgARpCJr6V3M%2FwKNrkDsAgl27LaDJEo8UY331JVNLWb3qOz3GjDahd9EBxQLWTUwk0Fp03WCyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddaea70c760731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-14T06:13:27.880336Z","times_seen":24513,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/question.svg","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:23.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /question.svg HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695d9321-3a5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPJ373ScpVCDWs55q7IXmyc1TFmVXnKE38wj2%2F%2Bw8efEZZv7wLFY8tZ5cbZQlEkVU16eQlDkkdlVSiMiOQd5vjDE1O2Z0sC68grwrP%2FAuXyekWA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bddaea74c850731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":933,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fd7ae2c913787c4423dbaead599bb8a","sha1":"7ef1259743de38df3ea74f5718bfa58a0a1398cb","sha256":"dfb300d1264793142abcc7df1d397e7e6b592faeac2fea2c4ad75133e1254b25","sha512":"249a15136042db92c0ca6acd4e21831333eda732c785bdd6d2951bee7bf4093684589f17421d78551d9f97b87fce89c5b8310ebb8614f4dd8d3d51acfa610d00","ssdeep":"","tlshash":"761100a9638cc93cf9031760c7123235b2b705abad8cb350907191b4592454fdd7b9ec","first_seen":"2025-10-16T10:57:34.858983Z","last_seen":"2026-01-24T13:50:31.718442Z","times_seen":7,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Ftypeorm.debug.js%3Ft%3D29473324%26u%3DpZHkA20hIRW9nvHGGDY5MjU2NDUyMjhjZmYzYzM0MDI3ZWJhZgVHE61GLUuG0ZJ0eQ","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:24.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Ftypeorm.debug.js%3Ft%3D29473324%26u%3DpZHkA20hIRW9nvHGGDY5MjU2NDUyMjhjZmYzYzM0MDI3ZWJhZgVHE61GLUuG0ZJ0eQ HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=typeorm.debug.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/14/2026 14:04:24\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: e1f67ee85cda3519bb60f5dc35ea62b4\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dQFpLlhZcKLPSBrKnasHzZmlJyj5q9SV4WWLRdaWkD81jlWqqDpGoxq5bXONcHrJi0aP5g5M%2BQBUiFS4n%2F%2Fb1%2BseMk6ZnjZZOmuuZDARPiMmrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddaeab0d400731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":841,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:04:22.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:04:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFQs3Svzr8i7KrSmuN6vPJ6fE4rdsaYtoIFZW8Gv6ICHau%2Br5W7cw%2FqOM9GzhuNTBwNtGnEdL1NFiBAR%2FhpS0xz9b7l%2BLp3QHSZ2yGJKMe1H\"}]}\r\nage: 17880\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bddaea1a88f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157716,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5915)","md5":"b67d79a4c015c14ed5c0daf164572681","sha1":"d2132942522823bb4480012be6571f36244dd36d","sha256":"3b49281f3333026633d821fa9d24a82321f96e0b57b9f50f2579234f57dfd274","sha512":"b8ee9ded49be72a3e1f23874e837265ed55508a912d7cf1e05abf09cbcb2ef95ef4a119fc60040daae46ed09d0d84c4113a041094cd54a5138cee6396af267e5","ssdeep":"1536:vEEdoIbzzSZpB4Gsjvx9mSmPwUuP4O8+yU:vEEoEL","tlshash":"49f30b9071f512f6540fc679bbab570e3a489103de0b9c4473ec52998f89d939e93b8c","first_seen":"2026-01-14T14:04:50.087636Z","last_seen":"2026-01-14T14:04:50.087636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":47,"dns":28,"connect":1,"send":0,"wait":20,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadao-rangers.com/ced53ef784030347.css","fqdn":"metadao-rangers.com","domain":"metadao-rangers.com","tld":"com"},"ip":{"addr":"172.67.149.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metadao-rangers.com/","date":"2026-01-14T14:04:22.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadao-rangers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 22:00:05 GMT","end":"Mon, 06 Apr 2026 22:57:29 GMT"},"fingerprint":{"sha1":"35:F2:93:34:01:4A:55:A1:AC:48:75:92:44:C6:A9:F1:06:8B:C8:37","sha256":"0F:92:7F:E1:88:D3:4A:17:AF:A5:E8:17:1D:25:01:25:06:60:4A:75:7A:9C:4C:C7:21:46:0A:97:97:88:B4:7D"}}},"request":{"raw":"GET /ced53ef784030347.css HTTP/1.1\r\nHost: metadao-rangers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadao-rangers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:04:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 22:56:33 GMT\r\netag: W/\"695d9321-19225\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FfbKmlxvPSmdpjechv%2BZ2mnKNdYLG4OfRjFvtqPk0LI6k9kHdZRoiqP2k3Ldb7oA%2FEmVFUxUyN5MqcFikQWz1q%2Fsrqv1PvBB2UssKwpSn6bEB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddaea2dbec0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102949,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d73682fb86ec08d874ea742f3f72a220","sha1":"f55a86ce8e6b4c8a46313fe7a430469dbeb9801a","sha256":"646985d607fa8ba32fd502b4ee5213b9418fd643032934fb350a6a4bd600932d","sha512":"c12f1fe255ec17a60a41b33b17f5c3986fc316197c530149a16c5b98665428f76b0d90f66cdbe0a1bcffed54b85b429043991ec004f2ddcacb911f480ea94f0c","ssdeep":"768:4MREceS8OcNLZ34vf/AVtXilnTsNpnudj7oBpxvBt3yVb96s/gbBCQ0XjLqM8qgQ:Rj8O+yVb96s/gb8N3NgVkCICdA","tlshash":"daa332e4a279e97fec33b4b9a39cf81c610cb256df1616d8fa02a11657c67f30c51628","first_seen":"2026-01-14T14:04:50.089053Z","last_seen":"2026-01-14T14:04:50.089053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"metadao-rangers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}