{"report_id":"b4f09820-d99c-4fcd-908d-ac6ca7cd533c","version":6,"status":"done","tags":[],"date":"2026-02-22T23:08:07Z","url":{"schema":"http","addr":"scam.makeup","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"172.67.195.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"title":"scam.makeup — Exposing makeup fraud, counterfeit cosmetics, and influencer deception.","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"scam.makeup","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"172.67.195.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T23:08:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"scam.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-22T22:30:31.423356Z","alert_count":0,"request_count":2,"received_data":211645,"sent_data":871,"comment":"","tags":null,"fingerprints":null},{"fqdn":"predict-network-ec767-default-rtdb.firebaseio.com","ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-10-15","domain_rank":0,"first_seen":"2026-02-21T20:19:30.418384Z","last_seen":"2026-02-21T20:19:30.418384Z","alert_count":0,"request_count":4,"received_data":1284,"sent_data":2147,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"client.px-cloud.net","ip":{"addr":"151.101.129.40","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2019-03-31","domain_rank":36263,"first_seen":"2019-09-05T05:11:07Z","last_seen":"2026-02-19T23:47:24.974125Z","alert_count":0,"request_count":1,"received_data":195068,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"tzm.px-cloud.net","ip":{"addr":"34.36.73.246","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2019-03-31","domain_rank":7497,"first_seen":"2025-03-20T19:34:42.680608Z","last_seen":"2026-02-20T08:45:48.28811Z","alert_count":0,"request_count":1,"received_data":306,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"scam.makeup","ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-02-22T23:08:08.980043Z","last_seen":"2026-02-22T23:08:08.980043Z","alert_count":3,"request_count":3,"received_data":67528,"sent_data":1398,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Firebase:8.10.1","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}]},{"fqdn":"embeds.beehiiv.com","ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-08","domain_rank":211662,"first_seen":"2021-09-23T15:56:08Z","last_seen":"2026-02-22T14:25:46.797376Z","alert_count":0,"request_count":8,"received_data":484694,"sent_data":5390,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":2,"received_data":711138,"sent_data":869,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":9803,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"collector-pxebumdlwe.px-cloud.net","ip":{"addr":"34.120.250.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2019-03-31","domain_rank":235802,"first_seen":"2024-08-13T03:39:50Z","last_seen":"2026-02-19T15:46:29.256652Z","alert_count":0,"request_count":2,"received_data":3420,"sent_data":1090,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":1,"received_data":19475,"sent_data":576,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.10.1/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b6536a22c6832363cd9c3de6d47519e","sha1":"75d91e3a2037c5ced639a7ed8d0983b2fdded93a","sha256":"6f10791f42de6c8708ada99086c3469eebb1dd55d4aa872dfb9848ddf19dcd2b","sha512":"16868e6144be10ac0fdd910b5b2fc0dac44968229212ebe1ec836bdbf36e1b47b1f43809da182d343dfeff1310f8fccada98a26703d54d9fa75cf7b45a82558e","ssdeep":"3072:Pc8bQZ71JFgnJZJcJOJCJgJBJwJhJHJ4JyJoJam5LFOKZoE/hvMy:PvMLenD64EGz2XJaI+FLFOKZoE/hky","tlshash":"d6040a887691b52313a361b5403f910bb33b6c6d6808406cf669d8e57cf9a4d637bfb8","size":187743,"data":"","first_seen":"2023-03-08T04:03:24Z","last_seen":"2026-04-30T13:02:21.147074Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c52f5b7051a278f2e28257c8b5de322","sha1":"2196208289ea614115b1ebe3e0faf0d9210f3ef9","sha256":"6a5dddb57e450af08e88bc48fe8a550e60ff81328367e2ec977b4cd5c826fc6a","sha512":"f2eef36c5a1bb27533c4314f35b47d6a4d56dab371093d37fa6f9ad375bf5e6289ad173da36bcf9cf72c9c67ba726276c710bcefe3803c6da67dcde4bec92551","ssdeep":"","tlshash":"0fd0a7a61d798930639c014f71b7d3a9666169907b22a60081decc6b6a11ed314e6968","size":236,"data":"","first_seen":"2026-02-22T23:08:13.195326Z","last_seen":"2026-02-22T23:08:13.195326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/static/js/main.839e97df.chunk.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a4cb3b18a0a4d099867bc1feae04ece","sha1":"e2bd1514cdd18d217660a351dcb0173ae0e047f8","sha256":"48b4e33f032ebd5fa16d648a319c371fe7806894deded63c7393ffb456b55322","sha512":"93eccb78013f579e21b543cb72abcfcaf4c9b82496d47b1801734d5760a8b53ee1734114b057bd1f1b039f076b3d602a6cb1046093ecf2ad1760161129d44b66","ssdeep":"192:/M5wn+CaJUeQGARhyx0kZa/D47S7vyS0bbUg/M0A0N0Z0oe9YHIOkDWHArNIU:IutaieQy0JD472vQbUEHD6+JKBA9","tlshash":"b99209597a23f05c16d30ae722fb5609b2b93745e86dd6307642c8c7776cacd122bf28","size":19683,"data":"","first_seen":"2025-12-04T00:55:48.337716Z","last_seen":"2026-04-27T17:33:41.516088Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1fa06631ff9c6f151e7489763e7a9afc","sha1":"650072e4468b7314e2dd97255cb33ee2786e22e4","sha256":"f3f3fad0619c785e84799a63a89ebea5127655d705e2bd1f51dc354331ed008b","sha512":"0ef2cc70fc234c094879d92d54498247a84a69004ef5cfa14c254055180a172c1aec3af3c196d6cd4a4e11fbe30c44efd0740377fe3d214197e0cebcf3698879","ssdeep":"","tlshash":"84b01259b1c83462464a7001245a5124b617415204811101a13846e4043d2054015e9c","size":89,"data":"","first_seen":"2025-02-05T14:47:09.189238Z","last_seen":"2026-04-30T15:31:04.159107Z","times_seen":777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7114c2d0f177e60fa69662d7db82c57","sha1":"4eba87a378fc2e19a88452bf32320128a0815b63","sha256":"06e3534dc014ff365281dcdb4d66c340757086c452c327de5cd6e7ecdd452ec6","sha512":"27b91ef5beff0062870e124558b10f2521bbcebd8ab1dcbe0ec970972f964e7165ad65dab788ad40d54ec0b39de328c41cad42f63a8ce9d743490d7a588d6930","ssdeep":"","tlshash":"b93106a3b8102c2aeae21f2617da7d515fb9678e8acc73082a5a01f2da517080c24c0f","size":1808,"data":"","first_seen":"2026-02-22T23:08:13.196861Z","last_seen":"2026-02-22T23:08:13.196861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GVNL11PEGP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b18e5b6f9074b10a84527ef9453c8f13","sha1":"ef1710186348c560979bad4fa4d02adcad2ce73f","sha256":"3067d9c4de418915cb2fc0bd2a907f292e96cd77dd347c213130fd7886c5d1e7","sha512":"132fea91658480c0745005c6e91498781be080c074f917da74078eacf8ac17edb94c866de4782be87d9f9d12425239f1fc7de609a790dd7c153ca526b2b0a7b5","ssdeep":"6144:Mi4D85YxaWJljxXUJ78kKUeDKJN5hSppR/U7dkQ/JYl:Mw5YxacxkJ78ZN/Uu","tlshash":"588419cdb3d670269392a478503f018bb57b69a2f44cc899f18adce42d7499a4237f7c","size":398917,"data":"","first_seen":"2026-02-22T16:44:13.97441Z","last_seen":"2026-02-22T23:28:52.765314Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09bc56f15f2337062774e73d0af45edf","sha1":"f45d198195920434bc60109713ccd9f6ee0391b8","sha256":"6dd2c76ded7b4de2669204b98b846efb78574c67582c2279172a09f874724796","sha512":"de549c0b45109ef651e7fbce4e867037cfcda38d2466113098f6375468902fc15b5227c0df4fa16e1eb758545c1533257549e8284fd8a8b1eabd52b6367dd0dd","ssdeep":"","tlshash":"7be0265774a32810175f09fd22b2a21870933362a5521c2288b9f8a86e64be7811698e","size":337,"data":"","first_seen":"2025-03-04T19:52:01.959892Z","last_seen":"2026-04-27T17:33:41.667978Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b8662649ce45a75cee4718c136ce61c","sha1":"e212ad1c7838ac75445629af9fd23c180356d336","sha256":"19a04467baa920868463764253c5f8216f88fc794025c361fd327eec7e769cd8","sha512":"abb332377a1457d8380364f9734d50b54bd0952bf55e2d08de1c1587ce29c9290476ed4e0000bea5a70334a918664c3c5b01918aeb148c63c74e5cb2512c55cd","ssdeep":"","tlshash":"6fa00274062168a09553c46817a66a016516a423569582587d8fc1107bb2483566cb54","size":65,"data":"","first_seen":"2024-10-11T08:35:34.362379Z","last_seen":"2026-04-30T15:31:04.143834Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/static/js/2.a4e584bc.chunk.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1449bb6f38ca78bf1e1aba538b5f6044","sha1":"588b4f2d48cf0281d2e5bdda0c5f3a3e753d9004","sha256":"6213a35c98af862b523b9e1c808ec1e2c304eda64d01564ae9aaf743d015537a","sha512":"0cbc76b20d4d756558a25fde4b5291d9d692daa8f0a98da73d72ba70f13ebd3df52049da224c00269e42b6b4c47582ea960969fdc998ee5e36d1c2581e32b29d","ssdeep":"3072:wj5erIlI86qfMyYZOMhQCxVP7ZIJD80HfKxy5lmKvh4PmBRcy8uyipI+fzkzT:peBNCxVVIlG2qPNQfUT","tlshash":"6c840ad97592f4621bf311b6106f140bb33d5a2f680c8460f212ede9b8f945e922bf6d","size":407527,"data":"","first_seen":"2025-12-04T00:55:48.350285Z","last_seen":"2026-04-27T17:33:41.348752Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdaac8a7ea551e1fb17dfc4d15306dc9","sha1":"4d858f5eb72abc8590ff54a081ecc23b0fffe860","sha256":"6eb321880f0fca81b97e94dd08ae97bda75108bc9c8bdc5b20088c8ed3fc9279","sha512":"1c9bc6aa9c7c1ea1b49360a5aad7fd018b36512fa4f85afadc428e3ab306fdfcaf913a5ab2a9bb60c1064e657e2654a3e775355528d55a3bef9cb68e9dbf0b2d","ssdeep":"384:iipSfibZfJmcxn24QaIVJXxYBXiMYB0dNUsHc0BuzTJPHqR2URxw/qpKC8ROmBOy:iiw+ZfJmcryINDHqTZCR3sCKoLmZx","tlshash":"7792d5893cd230d5523e92250567788ee3798c4576fcbaae802489f07c36b495fbc9ce","size":20624,"data":"","first_seen":"2026-02-22T23:04:48.766486Z","last_seen":"2026-02-22T23:08:13.188301Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T23:37:56.91555Z","times_seen":319383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/variables.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70ed87610d662c866c5450600ed33ca1","sha1":"856c307ea8853eea5d37ca28bce706b530783ddc","sha256":"c314b127267931b88d5e579da6cb713faf1c957d4790f42cee29f9c49908bafb","sha512":"f4b5d729e78fb89b500dd7b5565ed6a90251ed75b22230a2725772761c09689f345d15653295e22e118d7e04b5ba63361bbe73bc495c9146629213dd0dea8b67","ssdeep":"","tlshash":"d3f0c0d39382a4cc2269086c27971a061c9cf0176f0cddf883828fa2efb021dc4e05ec","size":540,"data":"","first_seen":"2025-06-01T15:05:10.88264Z","last_seen":"2026-04-30T15:31:04.040077Z","times_seen":607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"207511ba3b09120d3a5a75906c1b86f3","sha1":"ae0d696129aa6b73837d81b565fff731374bf3a2","sha256":"8f96e0a4dcb0347070be657be12e0352294e108da4ae381f5fa858e7956f11e0","sha512":"42259f12e6adb85c65cafcacb1622d566b832ca8ca71891c170df0ce5547792fc00a572892fcea4fc7897f9277a2db23f4f286fb21e245e5d65feacb02a10fca","ssdeep":"","tlshash":"863145e436e4f89c03872859083f6017f26d2d36157df9d19384d8b37c7584d906ae7a","size":1522,"data":"","first_seen":"2025-03-04T19:52:02.001497Z","last_seen":"2026-04-27T17:33:41.70774Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da4794aef36414e4238026a7062a6e9f","sha1":"28a2e2a2dce29f8db176102fe2c52cc9ca7b5579","sha256":"38b1de308b943b3d067fcfa281074b08c3246419c1030ac68e23a6d0f9f73d2f","sha512":"530a5b7625f658829deff77c0b65de8595891bbe1ca3197ef4c54964d3fd5c96465663117d6b33948cafff102dee64262466c44d3b30ee0e36d358df5123daa6","ssdeep":"","tlshash":"d9b0921500e6a06058a630aa460b280078d666979864a410bf8c87209f6959b9682e5c","size":129,"data":"","first_seen":"2024-09-22T03:37:30Z","last_seen":"2026-04-30T15:31:04.183302Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76d73fcaae8bc15638cd81521fcb8e8a","sha1":"ebfb9744bf8b37e6fffd19168e3025c684a869ae","sha256":"cac651e87dc4d83877f877be29d439ee750c7654936fc8c3587bc19b9e7dce92","sha512":"a6c618be333174b3da45a60e910df2667873e415b7963a859055a619d23faf7cba1c7f88942e25776fe84816f8255b98f59977cae6a8f070104ec65c151d53c2","ssdeep":"","tlshash":"8d11d0753a292534c785404b317ee7a93d3260617a02a044c26ccc255918e8314dfcbe","size":921,"data":"","first_seen":"2026-02-22T23:08:13.200742Z","last_seen":"2026-02-22T23:08:13.200742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af15c23c3b8fdb68e76eebd37a41bfea","sha1":"2c1d854e76e0bb0857983bad4cb34eef23ee0208","sha256":"1863292ce606effe2775638aec9ffb44dc95f193683cd1e8a2cc93dcb44b7ae3","sha512":"54ec0c1ecb7385bdaa92058ad0293262d5f3a27fae98d1dfa473780f7cc5439917758cd26b93d4b9ef09958bacc585ce56efb292e6c6b45edc8cc40fb8e40f02","ssdeep":"","tlshash":"b221dd8e73c6f87420f86249fb3fb30074713582c947648006149c693b96ed7a1aabe9","size":1299,"data":"","first_seen":"2025-02-05T14:47:09.164258Z","last_seen":"2026-04-30T15:31:04.18927Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WJXL7FH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8ed48585739db48b4dae78a5f759ec5","sha1":"407900892d6d13fef38c1b41422a45316e82c1b4","sha256":"8564cf2f95589885be2b058a6cfa979e1f8623cff82debfec1fcfcf184719c8e","sha512":"ecb0b5d254909cf75d15c7cfadf316e634c707c7c98c43c6addcc45db53f507b211803c9590e687d966d5d7221c3ec3759a5128fff0feb3d1073803e14b6d932","ssdeep":"6144:T7D8NSaAJljxXU18kKDeDKJN5hSppb/UQQF:3wNSaixk18CP/UH","tlshash":"4064f6cdb3d6b46283a3a478503f114bb23a7992f84cc894f186d9d42d74a6a4277f7c","size":310987,"data":"","first_seen":"2026-02-22T14:25:56.987242Z","last_seen":"2026-02-22T23:28:52.782418Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.px-cloud.net/PXeBumDLwe/main.min.js","fqdn":"client.px-cloud.net","domain":"px-cloud.net","tld":"net"},"ip":{"addr":"151.101.129.40","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c11f5d4bbf08eee215e03e7538e4070","sha1":"16d64f75f4cfcc2e35660bdac4dd695fe5259341","sha256":"f8fcc937e6ddf0f2eed779fb36bd145abc6fab3bee285ad9b527e6c5a485a418","sha512":"ebaa37bfb87a30be9a5a580898f468e8da0be25d8568865f5a98aa21a7d40feeb3edf836a5d43deb00e50a703f436f22e420a1c275f2629b972df66f8d2e19e4","ssdeep":"3072:/MBCS4qAZs1cjbdiZbJwIYiNc3hTzLItzYQnwZMZX7UkIKD8:/fRZs1YEjYiifszYQnwZMZUj","tlshash":"ba142b8e7aa57435839712a9047f050af27a5a01380bc480d977ead93c7cede613be7d","size":194393,"data":"","first_seen":"2026-02-22T23:08:13.180721Z","last_seen":"2026-02-22T23:08:13.180721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b972d1945a81d74e0c4b18f3ce83e1c","sha1":"b542d073a45abd1c06be3dd4e2dc05a6b6048980","sha256":"22d84328a43942318d0926499cbec3383ad3efdd3a9ab249e5a6841a05c7a92e","sha512":"a35d0b11b22488ff82f13e0f80dc82b434fed2e8bd3c933389c09202e7aaa9d91065a5aa63e02d407ab8e9fe44b9b9b635357e09a59ad6f9693c7f59a0fb3fe8","ssdeep":"","tlshash":"00c022cc32a38cb022ef0b820bbfa202a002300088800c300802b388a020ea3ea82888","size":133,"data":"","first_seen":"2026-02-21T20:19:35.98663Z","last_seen":"2026-02-22T23:28:52.788457Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f72ec6137f64ac51b3cd8a0b3dd5e4d5","sha1":"5ea3a52d4cb85f345d4377c43dbb00f51158891d","sha256":"38ce1e54c32cd74a4d2c79e476a4a1b0b083be865b9e46ce7338b85e59762028","sha512":"1aeb8c77db0d51dc77b070ecc11f1da02190e7881bcf8bce9403aba992c831d308ca291568fe120ae331bb17fc54123168452c9fb38e052e3a4756f6476b0ef1","ssdeep":"","tlshash":"3ed0955734c7503953f59d7923f7d54b25372605d85b4713d657c5e67130d45054344c","size":266,"data":"","first_seen":"2026-02-21T20:19:35.987623Z","last_seen":"2026-02-22T23:28:52.794009Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71c63ef8f1f9ace3195aefe1a525468c","sha1":"c91e12bf1ccfd869da9c32c6eac961ae8d3bb223","sha256":"90e8f0f8ddfba32e76cbbdcf70422081e31110e0d091a6d2ce275d5dc12cdef8","sha512":"dad56627f1f5c5db28c921885c965fb2d869c9664ce0033bd12f69bb9065b4da8322f8e937ccf992a04dd1f67b847071411b3c55a4d8de516d34a744d5f2cbc5","ssdeep":"","tlshash":"afc080677fe35e202bb14885575f951050453d160345f494ecd1d1607f540dd355fbc4","size":168,"data":"","first_seen":"2026-02-22T23:08:13.203144Z","last_seen":"2026-02-22T23:28:52.794684Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e40395f0bc4135789ae235df323bc44","sha1":"1a2a67016ce5d6e632609667fc4ccac997977789","sha256":"e9d28d9b41c1ce165b06cfa0bff86921cf5baeb2ea25218a56d6bb1e800d9843","sha512":"23bc1227bf4a7ddc59e31af4aa9c812a17b902fb4ea75aa0198855ea6f68acf46fb15f3dbdaeb01806b602b13e17d9e957f493e994ea151365b46a81677685d4","ssdeep":"","tlshash":"ca01ced379a025a116e968bb74d7ab41382986065e418a90ed81005abce4f7f52637cc","size":802,"data":"","first_seen":"2026-02-22T23:08:13.20406Z","last_seen":"2026-02-22T23:28:52.809394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c45f46abce4d8d3034b24fcb5960c7f4","sha1":"9707be029dc917907aa5d19ff776bbbb2aeacd7f","sha256":"8815779f44e0fe391e0e45d00bbc02665b19f5b3ec9a1d1ce125fc85cb4e3a8d","sha512":"a9733c41be30e89bd8858b53d2e4d4db70296e784e9a92c0c6029d772965d01149d8686d88b087984533e217cee91ad5b238b44c7fc68c2717838c3c81264b0c","ssdeep":"","tlshash":"1cd0121e1096124da17331b98b07e118d0320553880887053e9c93e0af2542b564596e","size":206,"data":"","first_seen":"2024-10-11T08:35:34.363916Z","last_seen":"2026-04-30T15:31:04.158183Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e43937e734d874407e23d749203323f","sha1":"1397eee578fc959e69d0726c0155efe5b5b2d0a6","sha256":"98833176f856b16dbc78e83ce61f4be9c726c0e9ec4d7afba103a75148cc22d4","sha512":"2299fedd3b722e23e105007b540ed5d6901e525f10195cbb0a474c2c2d6dc4c29c124682f81992341e0ec03c3c00912f8e19ce4dd7d8370ee1bfef59c91d91f5","ssdeep":"384:xUEJnanqaQnN3xaku/HL0f1s6WT5sdh5zR:NtkqFNBzk6fr","tlshash":"e242a44bb1fb01b15d7701be979f92981522d223ad81cd61f92d82502fe065b62f3bec","size":12673,"data":"","first_seen":"2026-02-22T23:08:13.205488Z","last_seen":"2026-02-22T23:28:52.811093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.10.1/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f61459b893c6422d6e8e96e8aa5fbdcd","sha1":"70f3f8029526e6e20051ec8237b9aeb4d7192f43","sha256":"7928369a406440002cb4b79ce79e2374bb580a6f189a16db2e400cdfa80e3130","sha512":"b02245a47b242988a5aee21c36fce0aef765f3e55bd962cbd3a27ba7b6aa53ce1345c8bc1d909fd7e4848199512f987624a0b34d189c062defc01e4d824e870c","ssdeep":"384:mcq9EarScee7MORRKT6dSR4VCPH3ZaSKLxkv2aaz2mM:ONrb7MOHKT1DaS162mM","tlshash":"2ba2c69cf7e2b06347a351b4413f310ba33e2958984c80a8b55de4e69db290f916ff78","size":22121,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-04-30T06:17:54.913256Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T23:37:56.91555Z","times_seen":319383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embeds.beehiiv.com/variables.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /variables.js HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=%2Fldames0TtkArgGjaALrGs7zvjFeZieIZo%2F%2B9bsqQUM%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1771801666\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=%2Fldames0TtkArgGjaALrGs7zvjFeZieIZo%2F%2B9bsqQUM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1771801666\"\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nlast-modified: Sun, 22 Feb 2026 23:07:46 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9d22243ebd8b5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (408)","md5":"70ed87610d662c866c5450600ed33ca1","sha1":"856c307ea8853eea5d37ca28bce706b530783ddc","sha256":"c314b127267931b88d5e579da6cb713faf1c957d4790f42cee29f9c49908bafb","sha512":"f4b5d729e78fb89b500dd7b5565ed6a90251ed75b22230a2725772761c09689f345d15653295e22e118d7e04b5ba63361bbe73bc495c9146629213dd0dea8b67","ssdeep":"","tlshash":"d3f0c0d39382a4cc2269086c27971a061c9cf0176f0cddf883828fa2efb021dc4e05ec","first_seen":"2025-06-01T15:05:10.88264Z","last_seen":"2026-04-30T15:31:04.040077Z","times_seen":607,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.10.1/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:45.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /firebasejs/8.10.1/firebase-database.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 52327\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 03:01:36 GMT\r\nexpires: Sat, 20 Feb 2027 03:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245170\r\nlast-modified: Fri, 28 Jan 2022 20:19:13 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187743,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5b6536a22c6832363cd9c3de6d47519e","sha1":"75d91e3a2037c5ced639a7ed8d0983b2fdded93a","sha256":"6f10791f42de6c8708ada99086c3469eebb1dd55d4aa872dfb9848ddf19dcd2b","sha512":"16868e6144be10ac0fdd910b5b2fc0dac44968229212ebe1ec836bdbf36e1b47b1f43809da182d343dfeff1310f8fccada98a26703d54d9fa75cf7b45a82558e","ssdeep":"3072:Pc8bQZ71JFgnJZJcJOJCJgJBJwJhJHJ4JyJoJam5LFOKZoE/hvMy:PvMLenD64EGz2XJaI+FLFOKZoE/hky","tlshash":"d6040a887691b52313a361b5403f910bb33b6c6d6808406cf669d8e57cf9a4d637bfb8","first_seen":"2023-03-08T04:03:24Z","last_seen":"2026-04-30T13:02:21.147074Z","times_seen":456,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":143,"dns":0,"connect":22,"send":0,"wait":9,"receive":10,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/static/js/main.839e97df.chunk.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /static/js/main.839e97df.chunk.js HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 03 Dec 2025 17:13:33 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=pySXCNcaXh5Z%2BdZwiDm14wIKM50uPa5t06AgMTnJOMQ%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1771801560\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=pySXCNcaXh5Z%2BdZwiDm14wIKM50uPa5t06AgMTnJOMQ%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1771801560\"\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nage: 106\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9d22243ecd9c5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19635)","md5":"4a4cb3b18a0a4d099867bc1feae04ece","sha1":"e2bd1514cdd18d217660a351dcb0173ae0e047f8","sha256":"48b4e33f032ebd5fa16d648a319c371fe7806894deded63c7393ffb456b55322","sha512":"93eccb78013f579e21b543cb72abcfcaf4c9b82496d47b1801734d5760a8b53ee1734114b057bd1f1b039f076b3d602a6cb1046093ecf2ad1760161129d44b66","ssdeep":"192:/M5wn+CaJUeQGARhyx0kZa/D47S7vyS0bbUg/M0A0N0Z0oe9YHIOkDWHArNIU:IutaieQy0JD472vQbUEHD6+JKBA9","tlshash":"b99209597a23f05c16d30ae722fb5609b2b93745e86dd6307642c8c7776cacd122bf28","first_seen":"2025-12-04T00:55:48.337716Z","last_seen":"2026-04-27T17:33:41.516088Z","times_seen":356,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"predict-network-ec767-default-rtdb.firebaseio.com/scam/makeup/visitors.json","fqdn":"predict-network-ec767-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:46.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 17:58:17 GMT","end":"Tue, 07 Apr 2026 17:58:16 GMT"},"fingerprint":{"sha1":"E1:D3:36:6C:42:27:6F:90:1C:F5:10:2F:3C:72:DB:58:FC:72:1C:92","sha256":"27:97:5A:F1:89:11:1B:FB:2B:5C:7F:4F:92:8B:72:24:5C:14:2A:58:9E:FA:09:24:B6:7E:C6:70:19:60:01:4D"}}},"request":{"raw":"GET /scam/makeup/visitors.json HTTP/1.1\r\nHost: predict-network-ec767-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nOrigin: https://scam.makeup\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 23:07:46 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 33\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scam.makeup\r\nCache-Control: no-cache\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"22a65f251e24c10d4d509f87ad449949","sha1":"1f4f490e38fd0d848b68d03f88db43f3a926e385","sha256":"c56e0ebd0705e5eda7802f082dddc857a553a476e64b432535f2d7cdad1ef3ec","sha512":"fbab245dc790811f44f122dabbf4fe7e09de8a9ff304a4d1f03d8bcf26ab64350b73145b2b3a81fac5a82b92843485a6a30ab28d25e17b61385773c41f010a08","ssdeep":"","tlshash":"838000083b8a0e8ac8022228ac202a382a800808b2c2020302a3202023aa30c8202e88","first_seen":"2026-02-22T23:08:13.179578Z","last_seen":"2026-02-22T23:08:13.179578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":223,"dns":36,"connect":12,"send":0,"wait":137,"receive":1,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.px-cloud.net/PXeBumDLwe/main.min.js","fqdn":"client.px-cloud.net","domain":"px-cloud.net","tld":"net"},"ip":{"addr":"151.101.129.40","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.px-cloud.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 05 Feb 2026 12:56:20 GMT","end":"Tue, 09 Mar 2027 12:56:19 GMT"},"fingerprint":{"sha1":"0A:68:DE:EA:6D:8C:91:7F:84:D0:11:02:71:28:7C:61:36:F6:C4:22","sha256":"8D:F8:77:A5:B7:C9:29:F5:F4:5B:86:82:F8:CB:53:E3:DE:D5:0D:5E:54:1E:0C:1C:E5:AB:EE:0F:E2:40:06:3B"}}},"request":{"raw":"GET /PXeBumDLwe/main.min.js HTTP/1.1\r\nHost: client.px-cloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: max-age=600\r\nexpires: Sun, 22 Feb 2026 22:37:53 GMT\r\nlast-modified: Sun, 22 Feb 2026 22:21:09 GMT\r\netag: \"f81e7d84cebedc13e8221e5218e573d0\"\r\nx-goog-stored-content-length: 81512\r\ncontent-encoding: gzip\r\nserver: UploadServer\r\naccept-ranges: bytes\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\nvia: 1.1 varnish\r\nage: 541\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1771801667.893878,VS0,VE1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nactive-cdn: Fastly-RG\r\naccess-control-expose-headers: active-cdn,x-served-by\r\ncontent-length: 81512\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":194393,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65402)","md5":"5c11f5d4bbf08eee215e03e7538e4070","sha1":"16d64f75f4cfcc2e35660bdac4dd695fe5259341","sha256":"f8fcc937e6ddf0f2eed779fb36bd145abc6fab3bee285ad9b527e6c5a485a418","sha512":"ebaa37bfb87a30be9a5a580898f468e8da0be25d8568865f5a98aa21a7d40feeb3edf836a5d43deb00e50a703f436f22e420a1c275f2629b972df66f8d2e19e4","ssdeep":"3072:/MBCS4qAZs1cjbdiZbJwIYiNc3hTzLItzYQnwZMZX7UkIKD8:/fRZs1YEjYiifszYQnwZMZUj","tlshash":"ba142b8e7aa57435839712a9047f050af27a5a01380bc480d977ead93c7cede613be7d","first_seen":"2026-02-22T23:08:13.180721Z","last_seen":"2026-02-22T23:08:13.180721Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":89,"dns":27,"connect":27,"send":0,"wait":28,"receive":37,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"predict-network-ec767-default-rtdb.firebaseio.com/.ws?v=5","fqdn":"predict-network-ec767-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:46.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 17:58:17 GMT","end":"Tue, 07 Apr 2026 17:58:16 GMT"},"fingerprint":{"sha1":"E1:D3:36:6C:42:27:6F:90:1C:F5:10:2F:3C:72:DB:58:FC:72:1C:92","sha256":"27:97:5A:F1:89:11:1B:FB:2B:5C:7F:4F:92:8B:72:24:5C:14:2A:58:9E:FA:09:24:B6:7E:C6:70:19:60:01:4D"}}},"request":{"raw":"GET /.ws?v=5 HTTP/1.1\r\nHost: predict-network-ec767-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://scam.makeup\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YRvwOJBPPG2KOqeDjk3dSA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 23:07:47 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: V7PEHyVkidJb5MZ0wHjZk+6WyiY=\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T23:39:29.797765Z","times_seen":14446516,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":134,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/api/embeds/6831d05b-f121-4e0d-951b-16f88ddd9ec3","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /api/embeds/6831d05b-f121-4e0d-951b-16f88ddd9ec3 HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:47 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=%2Fldames0TtkArgGjaALrGs7zvjFeZieIZo%2F%2B9bsqQUM%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1771801666\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=%2Fldames0TtkArgGjaALrGs7zvjFeZieIZo%2F%2B9bsqQUM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1771801666\"\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d22244158e45fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6103,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fcb12dcba966e2afcd5b05ec3967831c","sha1":"46aa0f11a2f8251e3af51e788b5ae5132860c04e","sha256":"181247b41094965f9c98c059171ed0bf92a7aa9f54fa4940a6b80c671901c703","sha512":"23913463d161e088de2e47264235a75f44cbfd851906f164d08458eb9b05dd426215c39a16226c61acb267585955349e069291c3f124da3b9dda190d5acba704","ssdeep":"96:GHLtXmF1CZknNec1OZHD4IFKoAz5STfi8LA4VaQm/mRnCGfExBleq5Rd+1E2AoZc:YmpeTDLFo3XKKxNHZGCj","tlshash":"98c19f255e49d9fe77ff86e9e7fcada4135c700afbd80fa8e520dc9960c05608562342","first_seen":"2026-02-22T23:08:13.18267Z","last_seen":"2026-02-22T23:28:52.776628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-length: 0\r\ncf-ray: 9d22244189075fac-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20624,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T23:39:29.797765Z","times_seen":14446516,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzm.px-cloud.net/ns?c=4d3cf5d0-1043-11f1-9386-29f4a38318cb","fqdn":"tzm.px-cloud.net","domain":"px-cloud.net","tld":"net"},"ip":{"addr":"34.36.73.246","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:47.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tzm.px-cloud.net","organization":""},"issuer":{"commonName":"SSL2BUY EMEA ECC Domain Validation Secure Server CA","organization":"SSL2BUY EMEA LLC"},"validity":{"start":"Sun, 27 Jul 2025 00:00:00 GMT","end":"Wed, 26 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:1D:F2:9B:60:4F:02:F6:EF:13:45:8C:55:A9:C6:54:FE:B1:1C:5A","sha256":"09:AD:78:DA:F5:11:3F:DE:9F:E4:2E:E1:39:A3:D3:0F:91:72:D6:4A:C3:56:CE:46:DA:09:A3:93:4F:85:F0:64"}}},"request":{"raw":"GET /ns?c=4d3cf5d0-1043-11f1-9386-29f4a38318cb HTTP/1.1\r\nHost: tzm.px-cloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://embeds.beehiiv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Feb 2026 23:07:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 172\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":172,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"58fbcc0c0d7891b650fbc2e1307b2890","sha1":"f0c5fc9716067854f3231bbb8ff86983db78311a","sha256":"cf7e2ef04d1d1dd632a029da8b68d4eae28f01b981a848aeea737c85ceed29e9","sha512":"5af4bc722c7d35c3bc76d8d5e4a6d9472ec06d5fc695c1acd865d7ed9e3397bf52b32da1a33a3902ba2caf3013fde712f0122276105eef0b3b91d80396c2b70d","ssdeep":"","tlshash":"44c080725055260a558c5f52e51415987842f447bb0e34515d75850c40205375e4f31f","first_seen":"2026-02-22T23:08:13.183651Z","last_seen":"2026-02-22T23:08:13.183651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":484,"dns":16,"connect":25,"send":0,"wait":164,"receive":0,"ssl":440},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WJXL7FH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-WJXL7FH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\nexpires: Sun, 22 Feb 2026 23:07:46 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 22 Feb 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108735\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":310987,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4041)","md5":"b8ed48585739db48b4dae78a5f759ec5","sha1":"407900892d6d13fef38c1b41422a45316e82c1b4","sha256":"8564cf2f95589885be2b058a6cfa979e1f8623cff82debfec1fcfcf184719c8e","sha512":"ecb0b5d254909cf75d15c7cfadf316e634c707c7c98c43c6addcc45db53f507b211803c9590e687d966d5d7221c3ec3759a5128fff0feb3d1073803e14b6d932","ssdeep":"6144:T7D8NSaAJljxXU18kKDeDKJN5hSppb/UQQF:3wNSaixk18CP/UH","tlshash":"4064f6cdb3d6b46283a3a478503f114bb23a7992f84cc894f186d9d42d74a6a4277f7c","first_seen":"2026-02-22T14:25:56.987242Z","last_seen":"2026-02-22T23:28:52.782418Z","times_seen":4,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"predict-network-ec767-default-rtdb.firebaseio.com/scam/makeup/visitors.json","fqdn":"predict-network-ec767-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:46.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 17:58:17 GMT","end":"Tue, 07 Apr 2026 17:58:16 GMT"},"fingerprint":{"sha1":"E1:D3:36:6C:42:27:6F:90:1C:F5:10:2F:3C:72:DB:58:FC:72:1C:92","sha256":"27:97:5A:F1:89:11:1B:FB:2B:5C:7F:4F:92:8B:72:24:5C:14:2A:58:9E:FA:09:24:B6:7E:C6:70:19:60:01:4D"}}},"request":{"raw":"OPTIONS /scam/makeup/visitors.json HTTP/1.1\r\nHost: predict-network-ec767-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: PATCH\r\nReferer: https://scam.makeup/\r\nOrigin: https://scam.makeup\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 23:07:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAllow: OPTIONS,GET,POST,PUT,DELETE,PATCH\r\nAccess-Control-Allow-Methods: OPTIONS,GET,POST,PUT,DELETE,PATCH\r\nAccess-Control-Allow-Origin: https://scam.makeup\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T23:39:29.797765Z","times_seen":14446516,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:47.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css?family=Poppins:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Feb 2026 23:07:47 GMT\r\ndate: Sun, 22 Feb 2026 23:07:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2258,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"81db411f3d725935f1588d3b4f4632f9","sha1":"8db59d70c88fb67dc7cd2859e2f1bbe13019c83f","sha256":"511981795f7a659de2a5218843f7915d4c6c73c784eeafbb1c0bc935974672fc","sha512":"73d0fb0e99311e1549244da9e39c086ccb58920b72c58fa5ad653dd98e5639bfe99dad92ccffdb14f98bc03d20c28460193c41fe10ca516c4a23bf04b58e39d1","ssdeep":"","tlshash":"03419a92083ae41467931cc623ce7c37ef0ea244b450e564abfe0c9cada7c69537272d","first_seen":"2025-09-17T14:39:35.303831Z","last_seen":"2026-04-30T15:31:04.041526Z","times_seen":846,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collector-pxebumdlwe.px-cloud.net/api/v2/collector","fqdn":"collector-pxebumdlwe.px-cloud.net","domain":"px-cloud.net","tld":"net"},"ip":{"addr":"34.120.250.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:48.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"px-cloud.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 11:03:09 GMT","end":"Sat, 18 Apr 2026 11:59:04 GMT"},"fingerprint":{"sha1":"A2:57:CD:62:06:58:DA:FC:CE:98:D6:08:3D:5F:16:F8:7F:8E:41:17","sha256":"D2:55:CB:07:1F:1A:CA:A8:A7:7B:1F:C0:12:04:D0:F1:A5:9C:73:D9:13:43:4D:0C:B8:30:3A:20:32:E5:0D:EC"}}},"request":{"raw":"POST /api/v2/collector HTTP/1.1\r\nHost: collector-pxebumdlwe.px-cloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 10493\r\nOrigin: https://embeds.beehiiv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10493,"data":"payload=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^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^m3ZZDxAIAh4QVGVoe3tIVXljWmsPEAgCHhBgXl5IenNzAVdxXQ8QCAELCh4QUHpRaFFbWWh1WXcPEAgDBwIeEFB6UWhRW1loegJ/DxAIAh4QUHpRaFFbWWh6AlEPEAgCHhBQA3BTZGFZHWUAYw8QCEZAR1ceEFFLSnVTZmh1YwN7DxAIVFNeQVceEGYBcwR8Y11RfXN3DxAIEBAeEHd0f150XmcEeHFjDxAIEBAeEFMDYFdnYQIHanVrDxAIBQABHhB7XANqV3VjV2RZew8QCEZAR1ceEHVFYEdzZANdUHZ3DxAIRkB}GHVx4QYwFFAH1ja2V8VV0PEAgQVFNeQVcQHhBnAkVfYWBrW3hcXQ8QCBBUU15BVxAeEHtxfGR4X2R7ZGBzDxAIAx4Qdlp3BWR3Wgt9ZQoPEAgDHhBmAXMEfGNda39jaw8QCBAQHhBnZntZVkpWY35ZYw8^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\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}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\u0026appId=PXeBumDLwe\u0026tag=Ui1nbxRHextWIw==\u0026uuid=4d3cf5d0-1043-11f1-9386-29f4a38318cb\u0026ft=388\u0026seq=2\u0026en=NTA\u0026bi=XQYoSQg+b2gbXUhsRFUUalwgOg5MDGdrURc7BGRCZEJaJmp1GU9ocDNSWjJcJyMQXjNid3UBayo0VnoAT257NE4UKWFIAxtkRnAzEUMUNTpRR2ppZ0Y8E1p+O3FSWyE=\u0026cs=ef49658ad6a5e3d55d5551bf431769d852360c300506a8c82a131fa793647627\u0026pc=7841836065059122\u0026sid=4d679721-1043-11f1-940b-38d20570b4ec󠄱󠄷󠄷󠄱󠄸󠄰󠄱󠄶󠄶󠄷󠄲󠄸󠄳\u0026vid=4d6790a3-1043-11f1-940b-2cf0397e83b2\u0026cts=4d67992b-1043-11f1-940b-38d20570b4ec\u0026rsc=2"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1024\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://embeds.beehiiv.com\r\ntiming-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"574d9f5783b400e7405a78998e4479d7","sha1":"7161e020a2af2c6cf178b8a2b25cbeefbd77c3d6","sha256":"a348a02a85ef552396301c6f2b4f650d0928934e0144a74729280b6dc54d8dd8","sha512":"978dcd984d1b2a90406e1b8b6e95b1fe29ff8979c72b85678d51fc570600b162195a621f9b85008a387aee7625a019846d6ef878651e798366f8fcdc247a24f9","ssdeep":"","tlshash":"bd11726545126c9d3ad5920889fa09e966e6019d0942984aff8c1e202e7ae8187b0653","first_seen":"2026-02-22T23:08:13.185899Z","last_seen":"2026-02-22T23:08:13.185899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:45.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scam.makeup","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:05:35 GMT","end":"Tue, 19 May 2026 11:05:34 GMT"},"fingerprint":{"sha1":"29:43:58:82:BF:8A:DF:D0:51:34:79:2C:2E:54:68:99:25:2A:5A:6D","sha256":"B0:45:EE:7E:89:3D:BC:71:38:35:F0:05:F9:B6:B0:6E:CE:EB:2F:AE:F5:D7:EC:EE:E2:70:9C:4F:1E:2B:14:EE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: scam.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 22 Feb 2026 23:55:45 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsZDIIM6ZLfRpbzeNG9JfUeZGrRI3NIjvNZegq5f5sBTZL3TtC2dFqFhbtfxv7iPHmBSbH7lmZCfwOVq6L05a4cpBmmJPAewlLzm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 23:07:45 GMT\r\ncf-ray: 9d22243b9f260731-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T23:37:56.91555Z","times_seen":319383,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"scam.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:46.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=KFFvwDLUyYhOIpnz3yxh%2BC0LEFOW%2BOSU0nlOfcrVACM%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1771801568\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=KFFvwDLUyYhOIpnz3yxh%2BC0LEFOW%2BOSU0nlOfcrVACM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1771801568\"\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nlast-modified: Sun, 22 Feb 2026 23:06:08 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY; path=/; expires=Sun, 22-Feb-26 23:37:46 GMT; domain=.beehiiv.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9d22243d9ba45fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3686), with no line terminators","md5":"a096e51398cf85d99c1d5925cfcc8ec0","sha1":"3314858b666acf9d8c41a5d55bb1d57cb1fb61d1","sha256":"6edab71873317222f52951f5736ed1d8b4e0aed29c5403a7d05c202561aa1280","sha512":"866e16d388872b746d13610d066010da383160d2abc083bef128da6b49aa79ae5346ff1aa5afc7465375ad6f47d7a4b12ae874dbbf7431504f11f6a26d58ea2c","ssdeep":"","tlshash":"9171b8f63e55f4284341449e243af22df12625296a25e8c0c3ecdc7a7c64ecb446acad","first_seen":"2026-02-22T23:08:13.187392Z","last_seen":"2026-02-22T23:08:13.187392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":33,"dns":5,"connect":1,"send":0,"wait":48,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d2224429a605fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20624,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20624), with no line terminators","md5":"cdaac8a7ea551e1fb17dfc4d15306dc9","sha1":"4d858f5eb72abc8590ff54a081ecc23b0fffe860","sha256":"6eb321880f0fca81b97e94dd08ae97bda75108bc9c8bdc5b20088c8ed3fc9279","sha512":"1c9bc6aa9c7c1ea1b49360a5aad7fd018b36512fa4f85afadc428e3ab306fdfcaf913a5ab2a9bb60c1064e657e2654a3e775355528d55a3bef9cb68e9dbf0b2d","ssdeep":"384:iipSfibZfJmcxn24QaIVJXxYBXiMYB0dNUsHc0BuzTJPHqR2URxw/qpKC8ROmBOy:iiw+ZfJmcryINDHqTZCR3sCKoLmZx","tlshash":"7792d5893cd230d5523e92250567788ee3798c4576fcbaae802489f07c36b495fbc9ce","first_seen":"2026-02-22T23:04:48.766486Z","last_seen":"2026-02-22T23:08:13.188301Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collector-pxebumdlwe.px-cloud.net/api/v2/collector","fqdn":"collector-pxebumdlwe.px-cloud.net","domain":"px-cloud.net","tld":"net"},"ip":{"addr":"34.120.250.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:47.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"px-cloud.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 11:03:09 GMT","end":"Sat, 18 Apr 2026 11:59:04 GMT"},"fingerprint":{"sha1":"A2:57:CD:62:06:58:DA:FC:CE:98:D6:08:3D:5F:16:F8:7F:8E:41:17","sha256":"D2:55:CB:07:1F:1A:CA:A8:A7:7B:1F:C0:12:04:D0:F1:A5:9C:73:D9:13:43:4D:0C:B8:30:3A:20:32:E5:0D:EC"}}},"request":{"raw":"POST /api/v2/collector HTTP/1.1\r\nHost: collector-pxebumdlwe.px-cloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 802\r\nOrigin: https://embeds.beehiiv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":802,"data":"payload=aUkQRhAIEHFqQgpiAkVjVkVVDxAeEFYQCEkQawNKZWVhZ0VndQYPEAgQWkZGQkEIHR1XX1BXVkEcUFdXWltbRBxRXV8dBAoBA1YCB1AfVAMAAx8GVwJWHwsHA1AfAwRUCgpWVlYLV1EBDUFeW18PRkBHVxAeEHN3fwNwWWdAfEh/DxAIAx4Qd18CXFN0UXZ7dHsPEAgQZVtcAQAQHhB4SlVhemV0BXdxAg8GQCAIeEGp^Sbd}EB4cFp9UEprDxAICwYAHhB7cXxkeF9kfmdKDRQ8QCAEEAgIeNKEH5ka2tnAEEdd18D9jDxAINAwUaFAwoCAw\u003eQEBQIDBB4QeVD`xkVFF1ClZkZ3sPEAgDBQUDCgIDBAQFKAgAKHhBXd0F8}dlgGXnBYXQ8QCBAGVgFRVAdWAh8DAgYBHwMDVAMfCwEKBB8AC1QGUwEKAQMKUVAQHhBwSFpLGVGd4alZKZQQ87QCFxHXl4eEHZqaAZ/AlVoVHNjDxAIAh4QaFhZZmJxcGN70VVEPEAhUU15BV09Pbw==\u0026appId=PXeBumDLwe\u0026tag=Ui1nbxRHextWIw==\u0026uuid=4d3cf5d0-1043-11f1-9386-29f4a38318cb\u0026ft=388\u0026seq=0\u0026en=NTA\u0026bi=XQYoSQg+b2gbXUhsRFUUalwgOg5MDGdrURc7BGRCZEJaJmp1GU9ocDNSWjJcJyMQXjNid3UBayo0VnoAT257NE4UKWFIAxtkRnAzEUMUNTpRR2ppZ0Y8E1p+O3FSWyE=\u0026pc=4814416304927197\u0026rsc=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1596\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://embeds.beehiiv.com\r\ntiming-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d87022689dd03542e23854306e0e7bf7","sha1":"8060d25af94dbf582f771e314b94658c30bb153d","sha256":"80f383c04865de0d829f99c23c9bb9f2d9df13eb7af728f44a80bb1567a13aee","sha512":"a3f09a22e6dec6222833644813bcf63671e892d3ef591d09cb1ca539a3f53854afa8cfd0a51a09158c901ca071d65fb3c8dd4b26a3df6145d09f78876680ba3d","ssdeep":"","tlshash":"a431ea11c1d36fdeecc702025981bdd2ed2928c31be2558962067eb210f5bb50f561f1","first_seen":"2026-02-22T23:08:13.189145Z","last_seen":"2026-02-22T23:08:13.189145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":130,"dns":32,"connect":12,"send":0,"wait":154,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"predict-network-ec767-default-rtdb.firebaseio.com/scam/makeup/visitors.json","fqdn":"predict-network-ec767-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:47.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 17:58:17 GMT","end":"Tue, 07 Apr 2026 17:58:16 GMT"},"fingerprint":{"sha1":"E1:D3:36:6C:42:27:6F:90:1C:F5:10:2F:3C:72:DB:58:FC:72:1C:92","sha256":"27:97:5A:F1:89:11:1B:FB:2B:5C:7F:4F:92:8B:72:24:5C:14:2A:58:9E:FA:09:24:B6:7E:C6:70:19:60:01:4D"}}},"request":{"raw":"PATCH /scam/makeup/visitors.json HTTP/1.1\r\nHost: predict-network-ec767-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 33\r\nOrigin: https://scam.makeup\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PATCH"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 23:07:47 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 33\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scam.makeup\r\nCache-Control: no-cache\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce6e1a1e0010f76aaf48e2721e11e0ae","sha1":"231ec7812c8f4bcec9f0c176d6a345ca606cf420","sha256":"2e4fd23ad88fb5122d37b989f07ec116c9d385fd9b3b156541856355e97db247","sha512":"22cd9e7a9206c1b97d7b6e95415b1fc472fa67d6ab86f6b89eb28a55e1141dd571175045c0d152a9b31da20fc91ed0d3a96010dee2f5c87b7316d0e17cfc621e","ssdeep":"","tlshash":"fe8000823bac0f0b8a000a20fc202c2c2a820020b28a0222e8e3230022a030c80002cc","first_seen":"2026-02-22T23:08:13.1901Z","last_seen":"2026-02-22T23:08:13.1901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.8542367383016939:1771799820:bmYKkq_dQrHNOcwaF-OLm-92-lP_fSDi4Ohd0IXtJvg/9d22243d9ba45fac","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:47.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.8542367383016939:1771799820:bmYKkq_dQrHNOcwaF-OLm-92-lP_fSDi4Ohd0IXtJvg/9d22243d9ba45fac HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12255\r\nOrigin: https://embeds.beehiiv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12255,"data":"+iVKEZbpyUeWfNbQA$DePUbDNbWAtAXIyAVPbRAwK5uZloiob3AGZ+ZNAiytMA$ZXKevAM3Qbh0KgkPvgAgii5gAy$lNm5ARGpQYKkUQa+ZyH+RQKKkMxmQT204yAyt9pway+o9Zy9keKA+PGowPNyAaruaFMTNzGwsAFGKoIeFmvh8t0h8CNA$PruWLGSRAbM5e4UpcqyfFJGodAbzyKAfAFoSyQbIbWPHo9zvdDV7KI54xgTskAb$FKA0N6h$8pt1YKAH$nt5nhFTAAM5MSbbFAb2zRKJFRr8AepxUtFh-oC8kAAIFhAxyhR$lzNupke5AyZvRFSrOPAAQJlRE9KlyT8yu8yAkgIAeHt0yAbFVMyJDXQfyA5nPLRiDd8kD2UD2pgPcRFhDwaRW-FN79IyRFndPAbU23bAFFm4rf8OAF5MKCiDoodeATIM4Ii74Uu4WxL604yh1PKeZQ1AAR$YrWbNFTNXZlBAyQ37RFnMqcFw0IHJ4vGCcUoMHLPdMU1oWJoAUCyaXmiMWgf+GYAA9PztR4PIpPzDYeerhileIMdM38UShWHtqBLPeBhJT5lyaDmSzZXXO$$X7rRBYzFRdQLUJ63Gpk+tRHlRszhxXZg$3ENbvR3UyK0U1mehyMoBOvOKUtHABqeB2M8O2IlgkFJkG0NtuLD0dO6ldiqO3h7TcUC0iFF4MM1wh7VeDeB-uXhnozHfvNF4D5xgmWonBtL7uiXKaiBHL3klSFpHgBWb7DwEaTV2+RkXQZHKd0JWaAoANmKAvHUpVZ5URVrAFbUL9mUamAZnHSdMRA9KxRikhkZ55bc5g9htEPlZ1IZ2YZVDVhrRAIXREQ9bplp3eO+YYZrEDYKybPWlZbNhyT9Qbe+UFfh+bQWNpAN$SbbNK8KkUQZyVVnqdxVLbK+YQKNDTp5RqAFSNZNV8lX9YZ8RA0l6UVPhsE$nr$VZ-oOUVmKwRAyK8MU6mk0um8pyNYZJ+99N+lNOrmfY3AXVVCbJUVSt2N90CyvGGNS0iDOgeKsCXg+VcPRI859yNrAiAZ9y9tggrI2yF3SvGaq4A9xc7vGlSbz9ctwlMk9ZpZY8MbQm8svYH3dVQmZY6$dGAIN-Lr9ocmetOuAdN+AyvrAbtAkX5+yTVyeK$AoRV-y8$YCQQcey+VmhYKXbeMUqDQCydeIhelKNgyQWPP8U5TvbFmX6QAxXI0MQ+kAMANPANhYC0RRN3LGaQ3Io0wPbIyXQZZXXyMFgEWVmGitl2Rgby0AVWfyVYnWtb-veRAXo+SyTf8KVInUKyMSO2EWDlmIQPyd9MC8KANbS8lUmhQDDuZHro8QtpDoElpZb37zD98iSy-tlBkPe8d2M2nIQKZmRA8SgC23bm8N6hBiQYZFWwY8P-w$egmA1ta6DYZAcDF5EydVyTdilePE-byUAV-6TwKF1HkDFYHUwf6Jmc7JhcCXy8903yAdQ9ZH5TpwrcVmgE5ftidnfI5mnfFDT6Vp1M9FIaniK87MYGVyM4pIwkS6nfD96ThRk6mVfisYZn38-TcYsUA6wfdPRhVD0iQe-dReAMDUABbLXsc6f6k3rU2S5FNXL+QnJiFPgAAd0NKypFKEQrKdvVAhZ7Fte6qQ3J4AERz8ItVY2SPAeMxeyRPWPkDp84ZMA+JKR8gb4yUvUbNwBnp5-lIUAVknS+zEGGX4dB8Jy9d3FF9ZFKnIWy1mopXUq5NyAZbKCTAYV8rzRAy-XkpwGSeaFibrbi+ok8dQHbPSZRu8Ax5b9IeYEZynpcURNuafh$X7+WLyPQXKm8SemFig3vADNQKZ2K5gUXyqgOqzyU8+MHn-GqCokDW8Ry$vqqA6gvqqAIEVXO981DahUM21LBFtXPhuE5UVlPPbedBmnzFeVvbeDqZDEryKshDlomS-FAVUqiIKAiVeA4fIVLlEmVqbmtrJVFeoEOiQ$l5BUFFk1lmG2J$vtQFpyQSlMd2rW-9MnuMa8i9mALllmmOIpFaeWIg5SDYp3B9ToATgtmVZDUZCD3G8e6bt8ry1Ab1PNp8P-uEIVIq5SXqobevDPlxkoADcUExpZQlmcnfkyRNFNHJ5du5pVB29$yB9o9+koRHkqazY3UVSM4E+gLRk89dvF2M8AclVV2pa+qHI$AblONopDmMAyW+4Iqu8rB$bqEyynRx0V9-PVt0vaCCA5AX+E6gZt2+4A5wunWPDpUGr+P-oLQDYyIfEzL43leOBKbbC8PKTrQ31LEL1zl-LD0G2qcB4eOVL+unSbMMAzLq3Vi-Az$NbN-q9UTh-w3RNykGeYNG8UylE6$8mEelIb2IzIyBvrKe2nVormV94Nmt2KMOr+8ymRMy6RJxrWb5W1nFM+gQS8l1+BW-VVn8AAD$MmZM9zD12eO8md+9bEbp3PvUc+9rJtsvlR2p$PotFyyzryORVbf8Ik2RAVNam4b1muD431Md8yU-myQnmkXsdmD3BROOOJPl5Vbaa7F9mEApCUbtLJrpnyyS8IWJmKgS4r95n02IfzsCFGgWVvP9AgIrxQ+x3mPbDSBOwWVNwvbhcNxUgPFKOrkL3VVgxcIzFQALRH4XM+cea97AbXxDhmU5-ZfB$OJhhWtPlDblMKAZ1eE$VHNbqv8+QZvsSolzgs$XtnpVArwyapDB9iT8GKDVemJe11Tm9gQQ22Q0UT+ekBFbh5KMtBECZ9Q+mE+2otYHRizxsynHG0S0uAKDl+OAJrPq6qfGq4JJ8b3Jh9r6G7kOLVYKD4v0Pe8NZueirbeO+E-lJQ6Q7HAJzR2MVgH51vFMrSR7pY1M2bv+SB+9U33U0yGZfAK+bA-MX6OE84SKn4$AAHZDSbTZfUmTrvnk-x5fRDT71IgTSuZJntMN1XA2+$tiDdvNgQbIZeoRQfQnC8fugO78144GpdumPFCPphBDB8DtVV$KvLSzseFET6NrtroxbMbgxS8XpZkRipZgucMoM-5sq4xSOnuXQ4iDVE4G8eeop8f2xPmBQyAYMvFlKvAziCUpJpI4vtnbcUyTncSU0z+gvnzMdk4v$Unbs-ePNZOrAeEw4$sUPX3+Df1dFph+82WuBcNYzDvbyoeg-lPgh7kCnI0964vMOgc1q-JDgJz-5AregRqmS1l2GuMYaVV6YCroaU2wr4o$JnSLo5gCTx4QKUnMfIZXy+DZCVqUbKnZeYXM+IgtaOGmeAYVCBsVYpzg4d0I+O9NgwEd8voaUFIYNJUmz1auCSpa9XaLHibE+-GQK9pKymcV$XPI4ZSJaV9Ml9Rwy49QlMu+CUkK42ST+S2TL9vxTl2CmQLISzORFkcour+NObW3haKuYEawKoFwbnuzEqo7cpuNlZn8WAvx-8R7XY0ZMxdv4pbtCfWA1ufqhlkQ8u0QOPb-NNK+c-nfOVzWAVD8qhfybu3uZgsAz5aPdulPJEzmq5EuriQKEPfDmPtAcYJVKmNDMeUqlHqYCnyiJEReUX0-UyvmtnTnJZrzmBSdWzp1bdIVzZqzXPoeQmmbobK8ZPbNEDVBIPwyr$9Y0AfbPPi$oRIEGPp8KBAR3Xez2$eloDM-llhbeqIQaV2bnS9zhYAP2yfecHGl0XH5KVNFeiQ8vbUeWH8D1iW-V8qDm-UEoyDnZgvHvNxiEAFytS8eabKh8upYIdB-Q1myTbWQbXWRhDmPiPP9T9qYKFJdMRQ9mB5EezhdBk+b-VXe$qGBHkfqL-1i1$omVhJdqgZlNiYE7X4mldu8Inpq4ZluNKeVpbgl3BCHMSCiPHh12-BX9gQim1fnRVWSQZqHSYbirVXivdx9LP8HVFA14FoREQFbmFQhmzugYKl9Yi8dr9fBSR4nUq1yMQpbibek-EYknziBJhxRa9JD7FKAWEqK55NzZnMKr9yHtRaNzKfAOzllp5anfeEBhFsYBivYvmpe0i2il-fHd5WnElvEKDXyXu4zXd9NNZUelBMQ$zbiYgmZO1CRhDwy5bOHPR$POy1$JuUlE13dEk+eu$KoPBb1ImTVtbciBlYS5HbPNZ3Ye$3PEyRAYVADVRhi$NbiWosEWEKhJ$3zX1uAZh6RfuHbs9XBGNoexk7qble$bdXiWYkAUbmAiYf$bdBDpqGlomkkB-cENZkkuE9i-YT4EP9E-QqeA9pqK9qSpirXTIyoFboyLmfRTiNZ99ZAqKA1WVwPybWVp5pS+$ZIGquFnbseyQbz4ByZ1QpAUyfAJEOVA1T-zhBNF92h91ZBNz-ipyzuUXezZ-K4poYVqh7esdNKbupVd8$libKHRyeqyAW5LeSPbooAwR9iMyxzse2YoYIdugWV0AMAH$0keqvLo4X$8oh9sEgIm4N$2ApAOAu4C$p-y9TI-nrSF$sAlXdPfbkPAh8iWmAY7IKyuS5AcQJ4-13khgXdFIZlh4vqlu5DpbguUDwyDENZ-z8I-glAMHcHqXJLY1VIQIuefe$NlqcoNnT$BFnBYFz5GBii2dg4JuMPyg0g6eePDDZAJ4ZLsIDkN8eFK9QZJ$HeDLogsbiy6dl1IyVRORi$so1R$uAks4MKWe-hUq+9sLcH0HMMlX29xmLgIoKHrL-Sr4NuS448FYHyL-ZDkX4yUq4ZBzWERRrFtQcqXN-LKCrHNrzkzgnPcQv1UidFwAmCMepeHbHo-gO4SYAuhNUQKoZkBY0qhdJlZNw95tSyrmZRwXZ9HmrmXoFDKAqZMepSvMA9B1Uy0imMAHIgXFOASID4I5kdvdDmXgLHGSSm3tVFwkgoB5Q81QyBkkI$wq1oXEoF-gYI3$AzQ8tlpe3q$irXQu2A0yEeRAruvziDxD0u7yq92LNuxNRM0NAnYzJnWdSQC-+MxBt5aqsi7rd5uAOPiAYdN5nMQ8wHNI5ERbd9aFN8LS$Xl14F$g3zar1-t48-uZFZ7ApeOz5eVR11qSezwM2DqZEy1SPzlXwFYgueoeVrAdS4bnHm8ehQvn3YlIyH1zs9RdPy$C9qznF4cS6buyl5glieJF$-eP$AGyUbWtgq+ri-bl+BYbpMKL+bCinolM-5qME9sLuVJ4AB1rWLprMSVX8AV43trYeHvY1tOOY9EqwPWGnmdE9-FDwREXTywBbMfIkrK8nYeke8ddHbNcZ-hexPYC$V+$qIbq2RIgmZ9e5DUCKV8mI5FcytU4aN+CizVY0gw-bNKG7l$yalZyYq0z+nviFbkdDQaCxdEC8Fvcx9$4HGo5sAhVwihLTLLtrSZ1P1nQWtFCZ18r-94Hldd$mbHyELoOeRhdsHqzMAZehySAfruAMX-t6t48RP0n4ZoorShSH4Kr3$uy19OrrkVSUyXF-5kLzg3zebAPKPFyyRIodi8ohFtehFvivn+mfAXrpVUlamLISr4Bv-PDULMFwkeBw52Y7z$9ub1nAPC14RVGqHPcZLP4Qt$P+z8blMOeUBkeBd84qSPrRof1ZgemK4vcv3fbgM8D2QmDsHHAm-33JE9tUNFQb9o5Eq5IIirH-STu14bHYtrA0lndHXhP73YexZahW4QoK-VZQ9MAl-rS0lHAcYlFn$wHgkHkvLsupmRO6euFxLInV4FCT4JBQKvo-zl1c3tHqP+BGui-zM8oA-rODQEe2msrkrMvplm8YcFtldKL5AMVbqaMq81Qz5sAulGQC-6bSV$NfdhSkFCnGFJY2u2RPIomx3qkRyP-Z0HYMA5R+M+zXoObNGT-9NynBSV4$qQuso1HNIALhQ2A2e6y5$nYIuG3imPVNQnb70mi3dsoN8o4N83zB1frmeK-0NJ5k9ABFhlElhnUkOKbbOUN2dq+Zy1QWmsEtRYbkeNPkzxk3U0eVZynt3AoaEhQJofRwAeoK+PGnGoEu5uGMcboOcicO3U3EE9O9eHyRem$4Mpi8IyUQ5MRICeM6$0dJ-c11uJD2DuLI4KiyMNH1YhSezQHVHRVIzBDAccnkRu4CL9NhURbRbHMHopu$NUAQIOCu5MZdrs4IlEQMbLqhyxkhcVYnY4kNgsg4Fucq0uIubT$HdE1J4$FWYIuJOC-5kWlHF3AIm+4OkoAUksy$1i55bZSwS7C1q7$v+8Lxo9OtPd8pq00tPayAusLTFWKLG7qpAR9TGs5+OYVsuMtFrYCtkDS7qgNlX50ThSkyrb$pY-kgBiUqUC05bC+hUhLD3yb8OtA7MQrWci3ycEq-NQtxMCD2G2GoYVfez29i1OCQdlhsvGzRyQ+oyEcYQRo3LRoUtrCWWG3N$pJOMv-o0R37CEngmlm+0E1ZgGd2XHeePv19cMzeiBxLgBfy3Fz5CIGsB3MtD2eeBnnSESEybevgtUl1lE-roGv$upS2$R-KRHIUGudMREX0yfeU9y+IepNvLnHRLgOYE90+ybC4ixC2G8L9F93qvIcUcRLCL+eFz9X54pB01+Re++ngDz0TCKiG4M8mddV+I84qMAviOGxp9GdC903IH9PhYoQfORnCXybRUtexcQFocyy8ABu3P5IMb+i7MniNZJDMd2lUbndpqMUpq0eJrP$sbROzcQZn0$xfA6V8OOI9OOx53I+Uyvb2IrJcEwe8yalQhA3wD7A5O8JiDxFlUvtcHHeCUP+P+xQiUcYyBWn2zY4qd4eSAtysrIiW+iDucO0zWRnw+5zWcYx-NZOQpIcISeovcZny3yeYoMdBXsVgD557XzFhBwGTGaMOb0E9W5Fq8mH7lP4RncVCcmWc0sL9IyF7MLi+DufSfmBJn4bIiDDFbZE+YSARvTkO-RI34sRFBW1y+-VH28S6LY4JhP$JylPtIQZkFUW3+UgdxCxPpzm9tIVXU6kvmtOaU+01rHCynZD1Un+SVo9N6R+4zYct4qGPizEmzp3YW0cotfPMVAheumezO2vYAUDaDDY$ACICz9qHM5zAJX+eCxh1Ure4b+2MIoEBo0XdI0iVMhzeK7WQCiHFdyJzOU6Vtm4CLpnzrXVSVG-$JevM8lI5ezdRp8tgqliXUAnTWonllBCl1FmkbpSKfot1G6AgV9G73y18rBzmrsI7M56s06Penwnu0Vk6bumYysVRXytqvZtLDJLRyTvtmVH7X-N4JbkzKGMmDoks+OC438eT0bla0RPZAbuCfgWu9$eCWc3QnvSBD7WeP0gVtI+tkCpBE0ALxi7GgbLnRrV93x$ZyMUD3q-oWPhU2pp2SF742oTcJAfVZtxfyUErOneyCQKvXnXZsIi$GhaYycMnyHFa$xIAttUdde89OEpFdkI7BV-8+unBkNhmzuHplQBzlZJTh-NbgQ8w3YHWtJKZZvprMiWLt1eePwLqQ5Lme5oWHmicYmZ7AnyOm7Xz3Ua9fna6BBabNrCmgHpkgz-vTMexRe12qm0m0$q5UAKkfYtfe2PeILWyg--L4+L+LEnvJIiJ4Hz9XNDIqJUlvz18+bWhE+0hSw5eEEDPtATrlMkZowRFGJs273TKADcwb5Wa2fuaa25oth1lp49mhxkh78D7oDRE9ue25TsOfScW3FcgITzm7NDSprEta-UneGky99MYEmGxlMkq48bgw6eu1I9O23$-7A4Flk1CZPtbPR5UNiKFbHb-GTvKMF-vpXOlK9PDpAW+LDyHA5p0Px09Y-yr25QIBp9Z6tUPeSP8PvxAZMQb2MilKOV4DCBEgOYtqOey5om+bxpFBDWJyMXJqf80meSzbLK$ARF8rR3bm1BUIqzx504vdzAODxfeHUPR3eiYu3eEe8fC4Qezb8KfHUAbpNWArg$btQFNvwAG-VYVUpKmSIeyB-lFIbWMqNroyRXBNDmTKepD28OkeY9F9KUl+1bWKiAZRDJ9NrWk+8LbVqZbPdWyeqZwgbAdMpZLDkbnoKN8yBUVCVAZkKOWN0NBVpEm9YYyMFKM5VavbZ9yu3DUUMo+zAhY3$KN8Nd2ooV5FKoYVhAfyf3oVDIe586MrIRCLnFoPCDSNvDqyABRDyVORAJ39KUKSAKqP7u$DrWbMyrAQAVQODp+8Bk0Nw7iiMD$xLRVQoqWUQnT8URFASM1HNPMDMKmAKDUH5nQiN91ceNvo+y3Q8DppUTZLeqTmNdVBogBlYyW8NPUmeul5RMIqNSFP6AiZ3y6ekPCQrirWAPZybVa9vMobOZmK9NcDNN-PAXy3qNZwyANTNBq98R+2CDa8vn1XOphVh$UnVwDCDC9SPZiyTVwHeOF4dc1ZD8VxFtZ0ahDuf8TMztyVAiDXbqNQQl8b235FKKuPbNW5UbChZYlKNwVG9gULu9zAvohWUJ0i9lDWh3Kw7a4b5vISw$YQPDGh5pRUmVTQlPKchDS3aXAZxPVAdPqY4Sm3N5PHO5+xvblF$Nqm4mqo$C8Q9pYyms4PVroFJR42qNNVfkopEFy8JqNTKnRbHVW9KZFOgDuDRB5ey$Nk8QPOUMH5HNz2zo5NKT8NFtAWi$bTQ3mgVXAeghKYoQJUr$RYY$ZV4gNLU2SyE-uhu7QVC9exR7hh8vAIPHFlUeWFnFTAPV$NEYAnRJypMIxAi$O+B9gen7vAN-4R0U$DWKQBMUkh88R9Ah3ZSPS2y5+UAMDem4J$o2tViyGZ1YiVkOa34hEWN4YHiTpbUFBhzh4Y1V2p+PNRqwNy8fWMfAt53y1QLmWVFPXWYyPibWY-o+Z+M+cN7NVRbNQh0t89R5A5ASAbH+VcWZ7JKNsiQylQkb-$rCKCZpp5LkiiXy3OOFdiqDANPbJkARiKT$ULN4rYKNJMz58LktEW1MQKV$TyVbQyTbhAXPIkD1QUKm2N8YKe05IZlhhQWoORlZUFAWeVisUEFiHVhy2lBNGmKKCZ2KRO87AlgVA6PIINUqIV1gRfzxvS3+utQbopV$KZMSDnW1rtgE5MXVb$ixuhASQEOhKA0ddoBPa6BDVxm-Ez+PDXFHCV+Zbi4ACTLQ$Ne581Z4OptcK0XA$L7hv$zVkD-A8NvNgA8p5$ygZzyXFDMAoPMOBZpPAAbq0NroRQEWAqT-ObnCK9Bv-XZgzBObvlZV9ilEpw5+Utu0L9o9$AdFGZkQXxbgm7qeovKnuEyRNFHyDmEdvpCrvDVPJHyWx28gPg3ydWH3vEzPyMRnzsA1AvKwqbfZMAio6bWV564BmU9zAUTSAknXlVJ-hKQ1CPDPN44QubKEnPCkd8OUDbkoclJIMoFS9yAZZPN9p9UMRRB4fWsY1KgBBqRgNZZcUzoFMNTy9n-Ne71Vv4kKyuKZZBYim9HznZ$HUVC1IIvI8O07yQ8enGPx2b-3by7lJl$M1HPl89RK8QN-PTp0$FUNVpGYOV8KEu9HXimy8viuNev5aovlF7$UOoVXVlAOSMQOP+qgqtviSbADRk+Q5PAHeVuQT9VLQ2KXVAJhDviTPFEQbt8yb9lNPPP050RyIAL1iWGRDZv8eNh1$iW3tzDyrITmKQXPivv$9XbMAdKXQM15yK74klrAnPbnZgF-RrYzVeQ6nBO9853mPxCUvq8whD1vS71EW-e4XkVATmZD1oUNpW3Qy3lhViTtmk1AUKbSIDZQpBMFYAA8S9Y-KlK+9Ne4OYouZ1rvMQeW9mbeAfK9wo$GWZkAUOnpKdgzFELfeKudZU9gOhP41S5K+TNx$eyEos$Mu1wqxpDkDyYmmudO6JAkgzkbNnYTpLxN0gu-JS7OyMbi40+qyYQQuQTfNe1cwgemtYvo2x2Y9qS+mkgiqrm+Z3vd8VCTxTxmkT8uibSXA5pmxBPkGK3AAui3vNgNgTn3Nzux5$NM0gfo0NAuvJ27M235hkS5uvJPn074eE4Y0u5KbazF9WZJb0m2TKvlA1FbQKz$hARb$I9DQrlQ9tfAT2AnGu5Q8uZy4alKWsgfS5uSFgyfuIWZmAViAp3Ng7NDM$S5u3pTsF0VT8Y1EpApKNlfgNtUAZ7Pyh8MekPt-bYDIpf8a-K0ooT2W$MX4A2hoe0AXWhWL0WVkKPbSP9xb$5o00VL6Db9ng+8NDf+KA989m7l3ADD1mGZAuOUiNAwkMEWEAv9RtFgDWVMZD6myZLABADprtZtP+ZDa21FkZL1q9nDJtRL01KM5699K5bzNWyCxY4icZWigpIhKbEVIap-8$S9Zti5NIWqxbz0VqCRPgudyYvLUIyrtgMTfTLmeoJZru58tIpiPREUIkwAc9nyJDbMDIL-ekAzp5vzRUiKxiq9cp91zDA0IUA-Wi4aNhV1HMEoeouWlaP4GfNNUs9fsqx$lQvNNUxIYZKnZSk2hcmGUimW4FiWVMi9tBLqQaz$A94iFcMfq3mkT5aBNPwItmQuMUD3reSwIhWR$BNXcokmEAXqmxqNy5AtA0VCoqxlCyvXJDBiCyLupnIbN6S5uNVfA+MDgQSQERDNy9rIrr-W5irQM$uqrIWKMADKWUDaz$AYtoEKDvWw8qFAy8sqnbeymDe1SvR3NgKsxU4gEL$SyEdgdyO9eqxr4M-ClIpi9M2QeohQiWT6tmvbo3Zp-k7Qprve$RHe$NJ$aFsqRVx7FM-z5A7$HRixbAgS6I-OWqgTyi8Le9rcp2uPPIQuxlQlHndirYbi8Q8c75VMP6Qxa93N9$rqhDJ5nJtr5RIm5otrWAZM$5iRynIGpL+ytEqLr1V+UPMOH4dP0r2UxuLn429oyKQfKkeAyLER8EFaUB-PkMWrophr$sK2tlkr5qB-mANpmGBkEwtkSVuiitm+k5dLu-ArFQM7tcUJr1SWu7B4JPnrSLMbcA2B3GCtJEIJn6V2norBnn2KgiHGwpxJMc+zr9-vVrBSrlcgQyInlGspG71B1LCSE1GsBrg641Lt$5rGsBggCvfdXCEYG1G92tfEgKanJuk4pr$HnHtL-QulTs-1BW-r4-hIe7Rl+yV6oV1KIInY7pQ1ktfS4i4no9$B-sLbY-G0H-7pDAAMsmsGlck2$HWNtf-+rZyu2qvWNr-nF+ByHgp8WsgPEP+4yKp$8fQC6-0rlycVVHUwro5+rYRuBUBoJtGnlG2yul$nWPreYvRVHG8pvWJtpETGCMBNZvWFCu-b9yHmGqVDBdZE+mMZLpKUUwt55EGWZ1lzvWGtn5JnCRhlqYJocBEI$0RflCaDvqR57+4noYtPxkRB-E9OtVwPQ9P8Z$B+i4YYqUDOGmzeGq4SGli-F13-OIfZJ164xpGbEoyAVGGt-AVtMzNIHyHhBFDQcFBKJ3RoEqoxUYxzfr3Wqa$BxmCxBfM0V1pabJTKgBqImtSezMxJM+Eh+uqdEBM9wMh-bIHTGSMr13r0nvIlmflbPR3I$ntIoRW$zUW0tIzErwmx$P0gO3E55rD56+tGftrtzTGJmmuBI4OciBEIYtW4ypJnGhBmAbmZzqSABO4BEI6tI45+fyquisrS9yQv7E+tmbaVFQHTCJxOQphpMMZZLeuLDeOEKNuKX1b2xuQmBJKHibiEq+gAwnhyFArURMexbGEOGBZ2o89AQ-zbkDfAAsJaOG9BSb1apCAh2OyFHezVtdMHX3G9CT-MQkKv$VVFKAAbHXk$2v5ZyAJK9pPNF3V7NK8GDpoXm57QJATbLQJKZOF5R6yVVrV4ZvibDIMZ1K9O1KCzkpAuGHg7VnPqqINFtAAAylPVKeNyi8iF2QzPeueFASoENQCgQfreDZhyrYZVbi9FgM8Iq-Fxi$CXtVGcPAOQtQ$AFEDAAMANlTAAFD125xhKyOlBn18-AhA+y+z-W9KbZMTxwDV-WY3Rdh2gxYc$NUFbyHpNNxoTFzDAepNxYc6AKh3EbDwNxwteAFJevKh29xDCz78lKMbU2VDrAUKbScNA82MZyPk1FtyPdDAqaDc2zWsVFAbiFqrUvLxPyoXJANvcQ01Z3n182AAAto1egeI2eA6N+yJceJdRACaLDgKkUZwHDruOyO+41DbOA7w-A6T9WkQEh8212AhNz5AJAD1-TdfFYVf1WZfZsVfnrUVnRhA2dBVRFVx2MXrhHZq8iwRV52vX4SIcFJMtx54bdtPH0ASNA3kfnTdVKQy9DCklwAg3ubZ2hQMLMuFCOCr2K1KyObpbsOAX3F9DNq9L19b$dbVBAVCq5FJyNboAWAqAUHk-yEHH$3Rtn0$A1kHSZPaZerEG9MyEHNqluAoql5ZA3KkKcM0NVQbVvedWA8o-K508JATkAG$MlKwKbJbhywrtO$RBQ+XAAbZr6$KMCG0Bh3GUrkzJQYcPdAe7vQLBA6AvPHOAZAqO+ARMeVAOQ$AefzQRKAZ8DAkauOUVRNe5Avwmi+U+A9U0DbaAZAlAUkRMeEKWDIDAA0myAboSNAAEYwy22RFgRyVyTqCAAAfJFBAA"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:47 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 9d222443dc8c5fac-OSL\r\ncf-chl-out-s: 6ZV5l9eoudlLR8fV6b3l7w==$CoQWTeYIxRBAV0qaYv0LBg==\r\nset-cookie: cf_clearance=OYUUPHgyj5ow7LpQG6FZf2Z5oCTjIdqYDK9NSsePCP8-1771801667-1.2.1.1-4EO.nnAUQWq1tQAxAHLIVKhxph.HOSuBmNVXx3YA4ObSQNRxUjW1gVEf6t5Mx7jfMZzEZvO.sAPNo2ogbtnU9PefkSkZpFqanvDU3KrFeGZ5qWbFfYo2aiC3rZby7YR7oBdsWPw5oenOOLsCV_VmlRj3B3YFXSiYuWvH1aNN3QWK2MQwzFGvyg1DSOpmm6VzehfBBO__Se95.BacrRF6KKt72Z_IQXkMh07vJF3s9Qc; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=beehiiv.com; Expires=Mon, 22 Feb 2027 23:07:47 GMT\r\ntiming-allow-origin: https://embeds.beehiiv.com\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T23:39:29.797765Z","times_seen":14446516,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:47.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://embeds.beehiiv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 01:03:57 GMT\r\nexpires: Sat, 20 Feb 2027 01:03:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252230\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-04-30T23:37:57.294297Z","times_seen":29075,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":112,"dns":79,"connect":7,"send":0,"wait":8,"receive":4,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T23:07:45.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scam.makeup","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:05:35 GMT","end":"Tue, 19 May 2026 11:05:34 GMT"},"fingerprint":{"sha1":"29:43:58:82:BF:8A:DF:D0:51:34:79:2C:2E:54:68:99:25:2A:5A:6D","sha256":"B0:45:EE:7E:89:3D:BC:71:38:35:F0:05:F9:B6:B0:6E:CE:EB:2F:AE:F5:D7:EC:EE:E2:70:9C:4F:1E:2B:14:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: scam.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 22 Feb 2026 14:04:26 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 22 Feb 2026 23:17:45 GMT\r\ncache-control: max-age=600\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-proxy-cache: MISS\r\nx-github-request-id: 80E2:2174C1:46A19F:4DC75D:699B8C41\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771801666.568386,VS0,VE117\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7a4dfb970a9e0d10bbfb96910a62416f05a46218\r\ncf-cache-status: DYNAMIC\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRuxX799TRMQqonGqGatzFe3Mx%2Bwlu6R8zZq0BgxYhqd6BwY2FQRvBrc4yfMj1apmlZ5r4uNfmz1BRKQzN1QikgVRNWpaOwDf56b\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2224399eed4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Firebase:8.10.1","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":62285,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (767)","md5":"f27aaaefe17f4e0a978cccc033e2784c","sha1":"2a7590a7c9949e1a4049b08d9463b18d20f4e6dd","sha256":"a384a8e46f02d525d9be916afa1de21fafcaf905425f001121b0fa455387f943","sha512":"99f653316e7c3b5f7ecdc5547e8c56fb4d06a5a4ff3a1e06fd6975abc1d7c07c6e49fa1081106f96eca76fce0da838622c1413405e172e29f28fb6d71b5aa144","ssdeep":"768:dM5SNRNUC3e5JQqUnJlUc6JvtkqFNBzk6fw:dM5aNVoQVnJlx6JlpFNBYCw","tlshash":"ca53f763f0e110760937c0d6a79753de7860911bdd868a94f5bf86a09fc6ef3626328c","first_seen":"2026-02-22T23:08:13.191842Z","last_seen":"2026-02-22T23:08:13.191842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":56,"dns":42,"connect":1,"send":0,"wait":160,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"scam.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GVNL11PEGP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:45.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-GVNL11PEGP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\nexpires: Sun, 22 Feb 2026 23:07:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137656\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398917,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"b18e5b6f9074b10a84527ef9453c8f13","sha1":"ef1710186348c560979bad4fa4d02adcad2ce73f","sha256":"3067d9c4de418915cb2fc0bd2a907f292e96cd77dd347c213130fd7886c5d1e7","sha512":"132fea91658480c0745005c6e91498781be080c074f917da74078eacf8ac17edb94c866de4782be87d9f9d12425239f1fc7de609a790dd7c153ca526b2b0a7b5","ssdeep":"6144:Mi4D85YxaWJljxXUJ78kKUeDKJN5hSppR/U7dkQ/JYl:Mw5YxacxkJ78ZN/Uu","tlshash":"588419cdb3d670269392a478503f018bb57b69a2f44cc899f18adce42d7499a4237f7c","first_seen":"2026-02-22T16:44:13.97441Z","last_seen":"2026-02-22T23:28:52.765314Z","times_seen":5,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":147,"dns":1,"connect":20,"send":0,"wait":35,"receive":61,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.10.1/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:45.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /firebasejs/8.10.1/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 7003\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 21 Feb 2026 02:22:24 GMT\r\nexpires: Sun, 21 Feb 2027 02:22:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 161121\r\nlast-modified: Fri, 28 Jan 2022 20:19:14 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22121,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22079)","md5":"f61459b893c6422d6e8e96e8aa5fbdcd","sha1":"70f3f8029526e6e20051ec8237b9aeb4d7192f43","sha256":"7928369a406440002cb4b79ce79e2374bb580a6f189a16db2e400cdfa80e3130","sha512":"b02245a47b242988a5aee21c36fce0aef765f3e55bd962cbd3a27ba7b6aa53ce1345c8bc1d909fd7e4848199512f987624a0b34d189c062defc01e4d824e870c","ssdeep":"384:mcq9EarScee7MORRKT6dSR4VCPH3ZaSKLxkv2aaz2mM:ONrb7MOHKT1DaS162mM","tlshash":"2ba2c69cf7e2b06347a351b4413f310ba33e2958984c80a8b55de4e69db290f916ff78","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-04-30T06:17:54.913256Z","times_seen":501,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":87,"dns":0,"connect":7,"send":0,"wait":8,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scam.makeup/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"scam.makeup","domain":"scam.makeup","tld":"makeup"},"ip":{"addr":"104.21.92.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scam.makeup/","date":"2026-02-22T23:07:46.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scam.makeup","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:05:35 GMT","end":"Tue, 19 May 2026 11:05:34 GMT"},"fingerprint":{"sha1":"29:43:58:82:BF:8A:DF:D0:51:34:79:2C:2E:54:68:99:25:2A:5A:6D","sha256":"B0:45:EE:7E:89:3D:BC:71:38:35:F0:05:F9:B6:B0:6E:CE:EB:2F:AE:F5:D7:EC:EE:E2:70:9C:4F:1E:2B:14:EE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: scam.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scam.makeup/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 22 Feb 2026 23:55:46 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7XywROz7IM%2BE0ONL2%2B0LEJhfd3U8SDxGrrdRIHP2JcKsTrVXtWJi4RAV5wv3vKpm02CUyOM5mLD29LxnZ%2F4AmnC4ZyP%2BFLjF7ya\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncf-ray: 9d22243d6f6a0731-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T23:37:56.91555Z","times_seen":319383,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"scam.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embeds.beehiiv.com/static/js/2.a4e584bc.chunk.js","fqdn":"embeds.beehiiv.com","domain":"beehiiv.com","tld":"com"},"ip":{"addr":"104.18.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beehiiv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 18:31:40 GMT","end":"Mon, 30 Mar 2026 19:31:25 GMT"},"fingerprint":{"sha1":"20:2B:B7:CA:B5:53:52:88:2B:8B:D4:11:B2:D0:0D:04:30:F7:AD:5A","sha256":"37:5C:EB:90:35:9A:EB:C7:79:BB:93:45:FC:33:DD:35:3B:7F:13:21:3F:3F:39:D8:8C:26:EB:48:D9:AA:66:64"}}},"request":{"raw":"GET /static/js/2.a4e584bc.chunk.js HTTP/1.1\r\nHost: embeds.beehiiv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true\r\nCookie: __cf_bm=bDos47g6TGS8ksHWE3OJxYIZOtNC8psojyIEMpTImgY-1771801666-1.0.1.1-z8SHuJ2M44gB9s5auhyFNxQs6LBY2roTCHK6XKd77zRDVI_O83KShDvNuMGi2y5iLGTZnBJGPtC3t5HXn7Y6hy30fTKBDDPxDKWOLjfFzpY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 03 Dec 2025 17:13:33 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=pySXCNcaXh5Z%2BdZwiDm14wIKM50uPa5t06AgMTnJOMQ%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1771801560\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=pySXCNcaXh5Z%2BdZwiDm14wIKM50uPa5t06AgMTnJOMQ%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1771801560\"\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncf-cache-status: HIT\r\nage: 99\r\nserver: cloudflare\r\ncf-ray: 9d22243ebd965fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65462)","md5":"1449bb6f38ca78bf1e1aba538b5f6044","sha1":"588b4f2d48cf0281d2e5bdda0c5f3a3e753d9004","sha256":"6213a35c98af862b523b9e1c808ec1e2c304eda64d01564ae9aaf743d015537a","sha512":"0cbc76b20d4d756558a25fde4b5291d9d692daa8f0a98da73d72ba70f13ebd3df52049da224c00269e42b6b4c47582ea960969fdc998ee5e36d1c2581e32b29d","ssdeep":"3072:wj5erIlI86qfMyYZOMhQCxVP7ZIJD80HfKxy5lmKvh4PmBRcy8uyipI+fzkzT:peBNCxVVIlG2qPNQfUT","tlshash":"6c840ad97592f4621bf311b6106f140bb33d5a2f680c8460f212ede9b8f945e922bf6d","first_seen":"2025-12-04T00:55:48.350285Z","last_seen":"2026-04-27T17:33:41.348752Z","times_seen":356,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://embeds.beehiiv.com/6831d05b-f121-4e0d-951b-16f88ddd9ec3?slim=true","date":"2026-02-22T23:07:46.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Open+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embeds.beehiiv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Feb 2026 23:07:46 GMT\r\ndate: Sun, 22 Feb 2026 23:07:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e0a00a3f6ab7ec04a66dfa361b7e9cc","sha1":"99de190ea3c393de80111d132e58abc20f988664","sha256":"64c18f81af81ab6b2ebc8598ed900f7023e0e8788bedd348ab41a92d76f80655","sha512":"6ed19e94e0438c18bf2c2ced27f712d94ecc74391b5239d12e2f300bee21cd9879377577e3cb86f385fafb469e93351e671af17d8bfd3e2231c0202909406a90","ssdeep":"96:ZOEba9JOEbaWDFZ8OEbajkOEbaFYOEbahOEbaNy+aZjzBrWOEbazubqGIFuV4UOM:a9KkjzFXCNqJCbqGIwV4jRlYx","tlshash":"9bd11f9000175050ab471ce627cebf34ee1fa2616040d07aabfd478aeddbda5637931d","first_seen":"2025-09-17T04:21:06.438819Z","last_seen":"2026-05-01T00:10:22.208483Z","times_seen":9131,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":146,"dns":0,"connect":28,"send":0,"wait":50,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}