{"report_id":"bce8a3ff-250c-4490-b39e-8ae76356b040","version":6,"status":"done","tags":[],"date":"2026-04-14T17:25:17Z","url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"title":"Root Protocol | Building the Operating System of Web3","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T19:46:19.165243Z","times_seen":17891903,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T17:25:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-14T17:24:53Z","timestamp":1776187493,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39524,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-14T17:24:53.361857+0000\",\"flow_id\":371559640682484,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":39524,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"root-xyz-isme-claim.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3499,\"start\":\"2026-04-14T17:24:53.348148+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-14","alert":"Hunting_JS_WebAssembly","trigger":"root-xyz-isme-claim.pages.dev/892e12242a26e9d_0eb9b3f1f311fa.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"root-xyz-isme-claim.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-14T17:25:19.135428Z","last_seen":"2026-04-14T17:25:19.135428Z","alert_count":8,"request_count":7,"received_data":3128592,"sent_data":3336,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/892e12242a26e9d_0eb9b3f1f311fa.js","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a40860fec0130a39c0fb41676c7e92d8","sha1":"3519792bb5c7f926168dbcd5cc6f7129ba149e7a","sha256":"c0d402acc52950b7c7d3b90439c75d028d424c3a1bcd1d99cd01b38783070fca","sha512":"fa8166a82587660d9199157f147bfaeb5efa635e2dc7e6f5fcb291aecb6d7fb58db3f611eadcf05c68889bb4043d260bfb30232d6fdc18b84da11e6c3a97b0dc","ssdeep":"24576:P57fww6mN5GRo62C0E4PhlPgZOmZr958l5dOeb8Sh5bQjp0W/mJvBmn016939Fs7:j","tlshash":"9ee5bfb876047dd6667f576bda96acdc03b626239acba4cc4064bbc305a3375fe02c05","size":3026113,"data":"","first_seen":"2026-04-14T17:25:21.87902Z","last_seen":"2026-04-14T17:25:21.87902Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-14","alert":"Hunting_JS_WebAssembly","trigger":"root-xyz-isme-claim.pages.dev/892e12242a26e9d_0eb9b3f1f311fa.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e78f6ff709c0e90846572f7dddf7d7c","sha1":"5c15252cce40ec2a02ae07c4b945e476e4fd21ec","sha256":"8925c6befddc9c4ddc0e46c4fa68126e7642c30b6e2833998baa0abc3f380733","sha512":"c446069da8fcdd3a8fdd8aee9955ddef0f783fe97a54c66862109989c710ec7b16914cef207d8666d98f1780c5c7e73e7be142c47d387efe3c2304fe225bd7fa","ssdeep":"","tlshash":"bde02b286e5610f926b37495c71f7240e86000735081dc01fd1cf68a4fc0f1934b1fca","size":321,"data":"","first_seen":"2024-03-09T19:19:58Z","last_seen":"2026-04-14T17:25:21.880445Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e23821566161a76cc91aab75d2ccc19","sha1":"ef2cdd1e14b6aba55d8fd78602caf14300fb6707","sha256":"315acc0ea9e407d9b3e7063d6f9c45b188e745548d85ae6c36233c5090b551f7","sha512":"a860b06a07bb6b7a60a4658a48cfe0407bdf4bedf7f31acf912937726f7dca1c230beb0aa93e986b3435444a5f98208278d71cdbbe26d8703ab4f04c6a35c7ae","ssdeep":"","tlshash":"18d02ea82e96123823736424831f92803be08003a0e0f8023a1ce6c60fe1a1000be5db","size":276,"data":"","first_seen":"2024-03-09T19:19:58Z","last_seen":"2026-04-14T17:25:21.882504Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dc0205ac390ed310bf9a660c2c9b6ff","sha1":"24df42fdd4c4ad48f676a081b3eac3457d3f6437","sha256":"a00cb25f6ff1f9a3bdf6659012f2fd47e136d9e37fc23e944dbd56dda57963d1","sha512":"7b570c084fe71373a0118303823646a0f5e61d409a622a90cd96d56e9fa04705235e4fabc1bc9aec5b455f3f57a2659b0e907e6dfa361eeace4177173ae2eb67","ssdeep":"","tlshash":"a6e0863935761574097b987fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":357,"data":"","first_seen":"2024-03-09T19:19:58Z","last_seen":"2026-04-26T13:17:17.328592Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T17:24:53.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7MPiDX8ZCUcH8%2BczRpPBEGhtavkU%2BRIYofpw0u7V3GocNRFSRYNO4XRHgjn1sUCEWXlNELaMKzTEBFM7%2BVGWsJ8MPgIRprBce9Lvhw68YHkpDwprD42zUTf%2FfIePa2OKXMaUxlcTjO4ApmcyJ2Q7Q%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec468199dea56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31330,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5795)","md5":"8c521174e4d807bf0d7e00fa661e8dcb","sha1":"fbffecd20fdaf42a06e44ba43c679747a4311368","sha256":"f510c553ac6091e6a3e6940958a8c325be2f8806768003a6727373abb10d66d6","sha512":"6c8755b81d222e1de1bdb643eb8bc069cc13174750ff45f9ca27bd72b89c125f5e16eb5c198ff0aec58b21e40d33dc830e43854e316a9080f49cfaaff41765f7","ssdeep":"768:Tk3l5y39VRxID2760DgH1f8ZfReTjU/EJPJWbzy1gAFfK0XLwYCYX6kL9G/twRa1:Tk3lyVT5I0","tlshash":"1ae22052fd52ca7a3b1751ef6bd6de4ea1b03003c910fa4836fd50918f899bb59b3424","first_seen":"2026-04-14T17:25:21.853965Z","last_seen":"2026-04-14T17:25:21.853965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":66,"dns":44,"connect":1,"send":0,"wait":206,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/892e12242a26e9d_0eb9b3f1f311fa.js","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://root-xyz-isme-claim.pages.dev/","date":"2026-04-14T17:24:53.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET /892e12242a26e9d_0eb9b3f1f311fa.js HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root-xyz-isme-claim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jh%2Bt3ImsGJ%2BudV3Fx0lpT2mXGn2Bg%2BQux9eeoVMSfiTLAPXBL%2Bg68sPV1Z7NCB%2BaWquNoquiQaC%2FqMojLro4aPbTIZWZDHiAzFAAL8WhoyautNzSsITtA6WtDu%2Fpc4u1Mk5FqQdejrZP2JZ9FAXwwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"54fab49307efbfc3e4e719f6a6791f76\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4681bfd4d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b5bd9f7ce7560e7f922ef7ca502c4868","sha1":"dad707de69f40381e9753189903ca9046f1c3131","sha256":"f74cb320643a314b6d655bd7a5fcafda3b2f9d862a177d4f635732890391d601","sha512":"9d5e07219cf877e52e6fd72d7bf52d0cc2ec851a7160162b416ce44f7128c9232e9cf34cbac2de2abb879f59bade3da9737bed5e021c244be62246c7007a367e","ssdeep":"24576:P57fww6mN5GRo62C0E4PhlPgZOmZr958l5dOeb8Sh5bQjy:f","tlshash":"2f25bfb876047de66a7f576bda96acec13b516239acba4cc40a477c305b3375ee02c04","first_seen":"2026-04-14T17:25:21.860428Z","last_seen":"2026-04-14T17:25:21.860428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-14","alert":"Hunting_JS_WebAssembly","trigger":"root-xyz-isme-claim.pages.dev/892e12242a26e9d_0eb9b3f1f311fa.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/index-H1mp7zay.css","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://root-xyz-isme-claim.pages.dev/","date":"2026-04-14T17:24:53.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET /index-H1mp7zay.css HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root-xyz-isme-claim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udXQamcDaHlE1Fy958R2NGhxES7U7pCriLY90%2FFtPcBcSFuDj2Yd1fs%2BxE3hKD9XXBY3Ij5WNIdEWokGHIK8ckAIlpd3%2FbiOlaKJHwIY9H1tcdF1Hrzqu3TGfugveEBMmRX2%2BaJxRBGqFEzxlK7qXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d64c96b80d7778eab434d631d93fd2e0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4681bfd530b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52547,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52543)","md5":"45ac3a652c83977187874709a64ef725","sha1":"1c83eb9c5e1270a2cdd23f16d433f29e0e7d2576","sha256":"309b0b3953be5a6338347376af7d7cd8984993bbe0069f70b00aab858e85455c","sha512":"3e0fa01a7db1387d5d3e5a580e68cae09bec7d563df2b08b2a1cef61fee03d8972eb48ad43a5109eba27ed266b58c6a0bb22c688137691d3f45fd8f26ab673ae","ssdeep":"768:sFN/E6BYU66RPY5tunVmGZNF/wbq0M4OPn:yhE6BYU66RPY5tunVmU/70M4O/","tlshash":"e033744a5f51143a6c2395f1c6dcab5ce21ee0d2ce6b1aaebddb10094bc13e50f79b18","first_seen":"2026-04-14T17:25:21.8644Z","last_seen":"2026-04-14T17:25:21.8644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/800bdf467ffe0fa01db45256813b6e9e8a013022.svg","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://root-xyz-isme-claim.pages.dev/","date":"2026-04-14T17:24:54.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET /800bdf467ffe0fa01db45256813b6e9e8a013022.svg HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root-xyz-isme-claim.pages.dev/index-H1mp7zay.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:54 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rSdf%2BeYObbhC3nFk2Uun1Jylp4pkUXukXhuRwbKdO4ClAKKJL4YG4616HU00e0NEwqz6zByLsAff5Yw5xIbEKWmKrXpaGMEjaKGihEVlVLyWmI1DedO7bkCDCaa3PKp10HrFXkq%2FOmT0FtG1zVUQOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ad8eee5ebca81f61d6e7f935c7c2571b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4682168da0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8e1d47bb03f53eaf5855b67758a07e6","sha1":"800bdf467ffe0fa01db45256813b6e9e8a013022","sha256":"f6b0ca8342560ef391449b6a433971d8bacbff3d02cc203eab0d4582b963b2e1","sha512":"2b565724e0a2efedc2acda0169b43a60bcf8e292e66f4822a3a2e3e29be551a3dfa3e3037bb03cb16107f432c743fc664bd8369e07b78295708724ad4c8a3f3e","ssdeep":"","tlshash":"f2e0d8a095d9417eee8d77326c2cf834d026b1a512bbf615a156375cd81e0363d70658","first_seen":"2026-04-14T17:25:21.868535Z","last_seen":"2026-04-14T17:25:21.868535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/css2.css","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://root-xyz-isme-claim.pages.dev/","date":"2026-04-14T17:24:53.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root-xyz-isme-claim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sd2hcIWgBCwX4srTMrd%2Fg4KXMdYxkzAc71%2FQGjQjj29ztB8aL3l%2B2VwA8WF9WzhpZ21q3pcRCxxZtrYBIgSEwo1kNdRm%2FBywfzYpwrwrW%2FbAZG3RqY0jqcVdP4GqowhSGHbjSNQ5BBUyv4m8X%2FlxQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cfd454e1f09cdac502b4b1d8c35699a8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4681bfd540b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7400,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f27e1a24fe3566b196257992c95ced22","sha1":"b8f83935ad217a4406e2960c0b0c53d4e03e9ed9","sha256":"153f3560eb20a3064582c454759e9ca583494a31daa57b800561eecf2030bc9d","sha512":"30dc5565b0078a02c7f3ad08abd22f268cb08a70aa660e83ab9c14ad7bdd3c5685750d154033cd5b0a0b68a0bab87345ea3655708dd9aab43a5e805355ca25a2","ssdeep":"192:9eNAPt34y2DmeOnIt3/h28jerKht3iI2lceE5yt3RP2G/:IwGfWGOVZ","tlshash":"94e15590046b9000eb876cd277cf7f366d5db5486085ca795ffd1898acded2223a4b4e","first_seen":"2024-05-08T19:16:48Z","last_seen":"2026-08-12T04:09:57.803203Z","times_seen":71,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/logo-CukcH8dS.svg","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://root-xyz-isme-claim.pages.dev/","date":"2026-04-14T17:24:53.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET /logo-CukcH8dS.svg HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root-xyz-isme-claim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:53 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2FnS1eQoqTYktQ7KbozTusFOhJwakt%2F2n41vOFJMQiCkoabQ7B4ePVm4HJb7Dg1j7KRyzOYR0fLCyM6DV%2FT4WWTYg5qb6IAse4Zo%2FEVezQH%2BtHVuSrhnyCTi0T126R3s%2FPkziT2CnmN2sjoZYUmHuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fac0bd2854881a94ba9acd1af3d39582\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4681bfd560b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f7c34b4dac8a3dfc8c151f2e4608940","sha1":"ee9c2a7683e06f49da72b7dbf6bb528eccb86379","sha256":"482a141c2dd78a44d5d04b4418baca0eca234804dee5e40cba8165224e92f618","sha512":"f743ca15399d581c2a87d2ce149d3f0c4ef562603068564b4b24ccc587747dd17dcd79ac7d232ba751be908b829f75dd8f505f671f8ca6434926e8ffac634cda","ssdeep":"96:mXE67xEKdIxotwBX6gRX9nXGBPyFXmxYoaxcmu9Ds:WEFK7U9nXGBPyRoscjs","tlshash":"ba91a5cfe3ac23f9d54077baec1abc64785a18f51b46e6a9c3641ca12dc248dc448dc7","first_seen":"2026-04-14T17:25:21.874791Z","last_seen":"2026-04-14T17:25:21.874791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"root-xyz-isme-claim.pages.dev/favicon.svg","fqdn":"root-xyz-isme-claim.pages.dev","domain":"root-xyz-isme-claim.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://root-xyz-isme-claim.pages.dev/","date":"2026-04-14T17:24:54.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root-xyz-isme-claim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 04:46:47 GMT","end":"Thu, 04 Jun 2026 05:45:16 GMT"},"fingerprint":{"sha1":"EC:E8:1A:87:41:46:B5:94:63:E9:C6:5D:F1:34:0A:5E:BD:D3:D5:FE","sha256":"12:AF:6B:39:90:0B:89:18:9E:E1:AE:F8:FD:A2:D7:A0:8F:C8:C9:F6:88:05:41:A3:C2:C6:7F:2F:92:EC:9E:85"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: root-xyz-isme-claim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root-xyz-isme-claim.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:24:54 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2htYU8GKh6gsRGHZdCC3NrNHlSm1YlUPqdokyPecIjG2dUfhfDujSZ97z%2FHcwnDj4wpDGHreqbamxFB07P5lGzBALWdk1EE78GhGGUAf3MifabiF7WG4DJ82WYPhdcjhqLs2gE9t%2Bhm%2FhP5YsWXVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8c92017b67d7c2a4e0e0814291e22a80\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec46821e9370b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":798,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b81d9888f98416a2c01ba190ddd49a8","sha1":"5509ba7b2a2f0ad3614b77e0128cab53173fd1a0","sha256":"48fc07c3826ac44cdc2c103ceaf857b24974db5f00833d7027903ae7d372b90e","sha512":"626662cb1906aa1f99d2a7503e076c4c2a9fb6db51aba73b6c029822ce6db7d237211d75769edf854c7f276f8f8bd1a6a76846aa1c2a49eea85d32d750a90130","ssdeep":"","tlshash":"5e01bddcf3aed276b502d7ee814fa435120238e69e80c48ceb961200d78496ecd116b3","first_seen":"2026-04-14T17:25:21.876959Z","last_seen":"2026-04-14T17:25:21.876959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"root-xyz-isme-claim.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}