{"report_id":"be4b5f35-7525-4ce2-9553-62a53d2ee615","version":6,"status":"done","tags":[],"date":"2026-03-27T22:35:52Z","url":{"schema":"https","addr":"xn--80aa3avhgl.com/","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"172.67.179.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"title":"FASTCUP.net - Турниры CS2 (CS:GO): Создавай Матчи в Мире Counter-Strike 2!","dom":{"size":20382,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (411)","md5":"3c987e0f426b77a813d4b4193b12d332","sha1":"bad48c87cb9cedd20bc02c3ad50c6bdea6d3c593","sha256":"54bb458c60f11aa682603f5bd775d72d96da843ad038ea6b7015d15734098069","sha512":"58e4e52fd0137391c46778ce7821e09f0b7b3414a0da1453326a52b962d64d49dd785fa25e52fdfb9bca4c88bfe3103b1eb6a4e74c159c56a6f2e5330502663a","ssdeep":"192:4xv2rupJkdC5XvZwYcDwfeeV6a/As/5urbb8jls0bYfVQeeN/MHEVyoGFdSjwtJZ:qXvZwRwf/A4qgOe6Hpwop1aGL","tlshash":"7392ca6168e528ab0103f097ed156f0a7ce540bfbb17a61235bc196f6fe2c11c66f60d","dom_hash":"domhashca217ef6b14e96d154a320154ddf7960","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"172.67.179.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T22:35:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xn--80aa3avhgl.com","ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":14,"received_data":1299789,"sent_data":6310,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-22T23:53:46.752956Z","alert_count":0,"request_count":2,"received_data":41981,"sent_data":859,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":9108,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":4,"received_data":232008,"sent_data":2564,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/js/aos-initilization.js","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","size":231,"data":"","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-04-17T10:22:05.106303Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/js/modal.js","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"698e2f800efeae4fe187e9d743acd79f","sha1":"98627c2cc7f0d5fb1c0e7b0e44644ea233507363","sha256":"45a2003dd8445b2482aa294bec0293377a93c133fd14a7a60f977664a2a89cf6","sha512":"40b0b3e4b6938a76a3e52047807aa6770a9bc3718323dbd027d7ee99f5b7b420610717c8303caff1f551fbf8d88225b3f2458b224aa0cd6108e6a0b0a61d0fdb","ssdeep":"","tlshash":"8d21d3d45839173500bb9be3f5d35aacbd5508969040a96b363c9ec20f405b350e26ce","size":1232,"data":"","first_seen":"2026-03-05T18:29:42.928609Z","last_seen":"2026-03-27T22:35:56.715235Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-24T07:34:31.941607Z","times_seen":17180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:30.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--80aa3avhgl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 05:34:57 GMT\r\nexpires: Fri, 26 Mar 2027 05:34:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 147633\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-04-24T07:36:26.479397Z","times_seen":20433,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":77,"dns":0,"connect":8,"send":0,"wait":9,"receive":14,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/reviews/avatar-3.png","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/reviews/avatar-3.png HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5133\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6946feaf-140d\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZNtUCXFWm4q4DZgJksiJXY1GB%2Fku%2B%2F343waywWV8Xs0T7ekB77hNNJtSGQLV0MNIYqzNWfGO6bQqFohsg4rK5F3Ht0lELbxm2Uko%2FUiLy%2F0KlO%2BZK%2FSB5jUe0K8%2B7gWfdDmQSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdfc5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"98dcf24751ff59e059bc7f0bb3cffeab","sha1":"50685ab67f472aad71ba4792b52642e52db0ea27","sha256":"b64a42df7a90a031d0a161081f9072cdbde721fc2de833a7a0323838ff850a57","sha512":"abd0dde1b944a85572916eb6cfec7d29d136817bfb9fcf487813b0c653a4e6c007b9877e3b4539439ed636fc8a05d13a0d0f32b03e4ffc14f4bec92845080f21","ssdeep":"96:PSa9+rqdSd/BBGG28VnA+q9G9MEaubopBzSYRMSNo6F2A:PSaiLBb28VnA+qKMY0d","tlshash":"9fb17dfbf3069a707592874212933b9a332d0186194df8363de17ac67b0cb8449cd599","first_seen":"2026-03-05T18:29:42.914833Z","last_seen":"2026-03-27T22:35:56.71307Z","times_seen":19,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/reviews/avatar-2.png","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/reviews/avatar-2.png HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5014\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6946feaf-1396\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5VhRDObBihOCUNl90QonnwlGIbVMYA30YCuK%2BqSf06IkEMR965dwb9exbw0XCaFOm3RhBVSLlqEz9VtZ%2Fp%2F3AUgeWaNSQgyCIfXg3iGM0WpU0k9C6IncdZyVfXq%2Fq88cVtRoNE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdfa5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"8c77e392248a78480ca05bf44fb0ba73","sha1":"8967709c242e0b6b855211d9542f1ba19f6f61bd","sha256":"26e7b8e5611c2c87eb7ec9ba7cbb084b6afc7efcd1aa959e3dd05fcb5a75f6d4","sha512":"27767d2b2eb95cace7f2f0b5806a27655d098c26d6b370db2b6104ebf638e63f7706dfc0340261ba8876d902e545d6a274daddf0b2cdb406b92054b46727064e","ssdeep":"96:PSbMuTOX1fNs9fghXsX1xV5uOTMc1kKfbu/hKUNCCkhbBYCMml:PSbkX1fNlmXLVkXKG3kbxl","tlshash":"50a18edfaf5455557a2f24c3311191ac0e785499964e189462028fc8dbfff407bfa822","first_seen":"2026-03-05T18:29:42.949261Z","last_seen":"2026-03-27T22:35:56.713649Z","times_seen":19,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/info/phone.png","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/info/phone.png HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 124535\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6946feaf-1e677\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RR5xZWXNMzTKDYpr%2B4fg07Rtg8NzcVFqVdzV3JLiNP%2B4UNDQyPYw%2Fp9mlMr9MJzfEmYnNwSEt3SHWP2PwWegesTUsMe6%2BUsDmh%2FQ6Lqej8tZO38PHapRyowK1bOP9brQNoorU7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdfb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 276 x 369, 8-bit/color RGBA, non-interlaced","md5":"3ed7dfcbee68bbe5fdab64b45da94ba4","sha1":"37fb91368bee0056eb114ae22f67c1c75c51fec4","sha256":"226d63c8b636f918b5241d750677ae7a2a5024598f019f1dfbcb78ae16d68bca","sha512":"ade690ad07369afc20264927c2a713928ec3ef05d941dc2a49678d2bae99bf82cfb66dd89db9a76606ac3e67ad30084d9a7fb6e2f5446f6275e3213fe19c7d0d","ssdeep":"3072:Gt/FgryqbAEBSmpbtyNe0oCjHa0JQzuthPLUcQ:G/FK8E8mD+r+uLT4","tlshash":"f8c312e933a7e3f6641820a6cfa7ffc4f15038a91e985d896af8c90896359d10f1c4b1","first_seen":"2026-03-05T18:29:42.931088Z","last_seen":"2026-03-27T22:35:56.714197Z","times_seen":19,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau8OPF80A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:30.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau8OPF80A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--80aa3avhgl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 41732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:16:18 GMT\r\nexpires: Sat, 27 Mar 2027 21:16:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:38:15 GMT\r\ncontent-type: font/woff2\r\nage: 4752\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41732, version 1.0","md5":"60f4eaa905761696901feda4322cb621","sha1":"d25e7bf8ecaf4070abd543ad612e6737f7f4de20","sha256":"359b1c22ebe30a2e9a3269d564afaa722f168cde3bb0ce7f778e000c86b2ba8e","sha512":"3551e70177f1e2284c32965554d917990ac62f608b8d0082dc3f853186952eecf92c04ea50824ceed0341202efa2861bbb9b77a67f809e2cb14c8728e38820b2","ssdeep":"768:3xrnHYtbQeZdmYETO0Nd/Ln6v+y0sFPw97auhAyXErwg0auuor3j3:hbHYtTbmNVQLFPw9+Oqbq3","tlshash":"4713f1b93189c8da799b1f64cd607b680a81b9c7c20a1504dfaf77b3d9d70aa303dc85","first_seen":"2025-01-21T02:45:33.946688Z","last_seen":"2026-04-22T20:32:09.379531Z","times_seen":1512,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/js/modal.js","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /js/modal.js HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6946feaf-4d0\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhpTRhEmjhCnlhtw5FB0mpCf%2BAektnzm9IXsPNu691Mg3%2B1RLfIWhNa9%2BlPkY6w9%2B%2FWZ4DgzFEs0wlI9Fy2zJVBykYY5QvDfKohgX8FCMRuzr4qk0OcYIC81BktbmphKQ%2FxeOWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdf55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (356), with CRLF line terminators","md5":"698e2f800efeae4fe187e9d743acd79f","sha1":"98627c2cc7f0d5fb1c0e7b0e44644ea233507363","sha256":"45a2003dd8445b2482aa294bec0293377a93c133fd14a7a60f977664a2a89cf6","sha512":"40b0b3e4b6938a76a3e52047807aa6770a9bc3718323dbd027d7ee99f5b7b420610717c8303caff1f551fbf8d88225b3f2458b224aa0cd6108e6a0b0a61d0fdb","ssdeep":"","tlshash":"8d21d3d45839173500bb9be3f5d35aacbd5508969040a96b363c9ec20f405b350e26ce","first_seen":"2026-03-05T18:29:42.928609Z","last_seen":"2026-03-27T22:35:56.715235Z","times_seen":17,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:30.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--80aa3avhgl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 09:31:25 GMT\r\nexpires: Fri, 26 Mar 2027 09:31:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:11 GMT\r\ncontent-type: font/woff2\r\nage: 133445\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29672, version 1.0","md5":"39357dbe8984618163ca98d144638fea","sha1":"3c5f9d8066bd583aabd676a861172a5297ea6e4b","sha256":"327a37fa78452e54fe5ecfdb3039f611080c4629244198faff8384ad4fc5a48b","sha512":"24c0cab0a589f8bbcc59fed31a87dc1187371a7d46603f80b76b9d453e350a3e35cbe7fac080635961e90859837b42285b0776bd0492d16ca1fbf12e5b97f74a","ssdeep":"768:lBIIE2FXroI4UZRppjb9Y5mtKR6klfxuVyDfdLnAUbN4x8:lBieHjbW5xR6klfxuVyzd7FY8","tlshash":"d1d2e18c85685eeff70196dd18131437c91e3649f78def60c5842bcac1f936aa2a5c78","first_seen":"2025-09-12T02:44:04.646948Z","last_seen":"2026-04-24T08:22:36.692028Z","times_seen":1652,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":121,"dns":6,"connect":20,"send":0,"wait":9,"receive":2,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau4OPE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:30.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau4OPE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--80aa3avhgl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:37:10 GMT\r\nexpires: Sat, 27 Mar 2027 21:37:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:41:59 GMT\r\ncontent-type: font/woff2\r\nage: 3500\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84304, version 1.0","md5":"29c5829e6a5bb1b7e04b834f09dc7cb8","sha1":"1f596e008cba8ced5dcb71a91ccf92d697c8620d","sha256":"e97ca92cebcf4df3539f6514cd652a84a827939e6d5eaf5edece6d83c8229138","sha512":"549c8ce6b02e89651228190e4ee8de86c7c259fbc61d3b327a09f43f6a6a73be98e4998880fa939474ea55fee34cbabe9e41e601510d0b6a093289a95ed714c7","ssdeep":"1536:j9oKbqG8ZLr8xR4vLxxeXPHQmp91WNK8Vrn/QB/7rj3xCurL6g5XXXS6w5aohuPG:jGKXWn8x+dx8tp9I/n4BL3xpL6gFHrwp","tlshash":"1e83126cb8d1605a8f9038b1f17448f92381240cf1617b2b5fd46b46428b9e39fba7d6","first_seen":"2025-01-21T02:45:33.944465Z","last_seen":"2026-04-24T01:00:09.385396Z","times_seen":3245,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":151,"dns":1,"connect":7,"send":0,"wait":10,"receive":8,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/favicon.ico","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:30.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:30 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qz71%2Fjp2clScc6OdM15M%2B91A0frnD%2FOfxwoI%2F7U5Vqv9lEd%2BJSLHnlXIU1yy9F9bkY6UqPlrneK1Pn%2FmtnNOuBTsXWjvMIovFhMO3xMnJAPdE5rX%2FVBkftXMowS8LUgyTkuh7T4%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"3aee-646678bb12c5d\"\r\ncf-ray: 9e31de5b3ed45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"0ff69391c24c877bca4c4579827e0796","sha1":"4a7fa563f468c0de935d3860d27815b747506fe4","sha256":"d99ca8fc6b9c51ad03d4f25d56ee7ac56de013d1f9150e173887236526185a24","sha512":"151c24b10de0b5d0b72239ba64c057ae314306a93e4a68de66b182f07280c70fde7dae67c8ed711d5328048fc88e377c60675ac76abbd2919db43abc80c41bc1","ssdeep":"192:jn3TOwFsixuR8tB/vt79F7AXW00000ios7wdP:j3TOwJd1vF9a00003s7GP","tlshash":"1862edc9aa45f86ccba963f0f5bf8ee8645f2d5e400d2723149970ab46b0251b83f533","first_seen":"2025-04-18T14:37:21.905456Z","last_seen":"2026-04-15T21:02:34.632516Z","times_seen":394,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T22:35:29.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83RjmCE9ODh4vaBHKMmYLxKQne4yzc%2BlqUfAVfeu92YHNMDSIwvrN%2Ft2YT6zJwUpuDYHlLeOFLRjpergfQFVGqA2gZuhnOfC3CVfGqdxD%2F9RfwlsI1%2FEfAL%2B8sLtI7hJUZO7fJg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e31de54b8de568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20608,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (391), with CRLF line terminators","md5":"40377b9feba3774c71c7d6caf5685147","sha1":"a76f64508f576a9385889e8a5dbcd8f576d0bac8","sha256":"513fca106498cd5e2686085a1b5e80ba3de12854c228f6c96a1d4a23800724be","sha512":"6a814590f4307167aa446c7724ca161795bcec5f1e6373ec201f77760b2b26c11fa90f7a7487c4d923c7d4fd33710d37c2866f089e315b2469ef19a92d188628","ssdeep":"192:dfrFBsGCOCiChNwiIwY0eVeHI9sw23rrU8EDs0U3fVreZWJJHfVtSRpIS4LBgvoy:hChNwZwYB9K7k5ZiHDQ7oUK2t","tlshash":"a892996168c528ab0123f057d9156f0afce540bfbb16662235bc2a6f6ff2c24c56f609","first_seen":"2026-03-10T20:05:06.354448Z","last_seen":"2026-03-27T22:35:56.717389Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":21,"dns":11,"connect":1,"send":0,"wait":194,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: text/css\r\ncf-ray: 9e31de571d1a56c0-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KG7ZENXCTY1A38A3KMZZY6R0-fra\r\naccess-control-allow-origin: *\r\nage: 223923\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Mar 2027 22:35:29 GMT\r\nlast-modified: Fri, 30 Jan 2026 17:33:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-04-24T08:30:26.700545Z","times_seen":32868,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":17,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e31de571d1c56c0-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KGVB6NBDMQ2RETKW4JBY27SJ-arn\r\naccess-control-allow-origin: *\r\nage: 33797\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Mar 2027 22:35:29 GMT\r\nlast-modified: Sat, 07 Feb 2026 06:04:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-24T07:34:31.941607Z","times_seen":17180,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":16,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/js/aos-initilization.js","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /js/aos-initilization.js HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6946feaf-e7\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAbVMYBOFGjlEg8Deq6GyifS%2BNrytgtFQir4pQ56hGz174YpaE61oiSq6dlLkHROH2weznwzYD7dQ76dhlsJXjRIc%2FwSZX7E%2BHb%2B8fCDr6qZaOuPutYJpLpIRjJXVmnqqD9DH2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56edf35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-04-17T10:22:05.106303Z","times_seen":1556,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/logo.png","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1861\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6946feaf-745\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7yDgpPg6CEM6DhLRPuYq10ZYL1JtJnkTx5LIXwy9IHh5TjNUAdvOadTC0783w24Tlsdo%2FdNYiDlNWgxZSmJYaDxE49Lu6f5f2vmCdDvGXTJfMuV3mLx%2BsYRYoorMa33s7Bl0TA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdf75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 35, 8-bit/color RGBA, non-interlaced","md5":"3022d5d2232205947a98332da0e880fd","sha1":"7789d34784543535ecc8a7b95716334528924652","sha256":"736c96c14be32e03a32a5a1d53803876b2008755bf6fef108d13f40348119b3e","sha512":"5167fb48d4c7ef38dcc191e2a84d5687d9e840a3b42eae3a79b037a75d8f78d08884dea2322ec0d8999d53b7ef168aff68ddef09f18dc97b389fd2836f27875a","ssdeep":"","tlshash":"8d3119d3dad0a0feebb83a6c0730ed9c95e6763d172707011d34ce0ea43d488068621d","first_seen":"2026-03-05T18:29:42.939638Z","last_seen":"2026-03-27T22:35:56.720106Z","times_seen":19,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/stats/item-3.svg","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/stats/item-3.svg HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6946feaf-59f\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQfqxCI%2BmO11NLtdKiCgli%2FE3QPdCJ0UJuMTjdm8%2F1dSzO7u0ytwnTX2QUq94BhwQcTU0aEBQEjAtcvBiSr1dGOdOv1DML1VOn6PO%2FBFbV3sFrcSHBBrAKoxSQoeCpKEPyxmSp8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdf95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1439,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a820bbdbd7038a5a766537f72d30d2d","sha1":"277a15f83e98e667522ad8ae89b451264bf9dc1c","sha256":"07f50b685e4bbd8b5ff59df9e886acf50e65309d36add176bca035167bfede2c","sha512":"d42022338b7c2d4cfdae5db61257dbc74a75ec76867589518fba2c5d62af8942e6b433d4b5d872dcb858b7f839604940804c011e57cf5f71079db9b990588e90","ssdeep":"","tlshash":"5d21c0e663d448acf4520f64f702b1b021a92cf77ee4f25145620a71b65925d6cbfed0","first_seen":"2026-03-05T18:29:42.935613Z","last_seen":"2026-03-27T22:35:56.720631Z","times_seen":23,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/reviews/avatar-1.png","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/reviews/avatar-1.png HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 4709\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6946feaf-1265\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4ioKW59OsrqxrW3T5NkBqVkbbqb%2BOWVlPJtECnN2XA%2FKY6OBTb572mcakE3EsX1PizAukZHWQ0QOZ3JAtBkfheNTW0ABZQedMWgus4BZKbAQGucJttJamSd%2FeAQUqZw1YpG4Ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdfd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"c0116e7d67eca3b811d8af4d5daf2423","sha1":"eab7a49edd020131363e1adbf6d03fc328daf3ff","sha256":"0a913518dbe60b7848a6c4d0ef68bdfe7e53bf921865208261eafff1e5439cbe","sha512":"4d900585e1921f66874ea746da0a2edab6e79648dcdf35ce3e7c250dae752ff5e0becd4f4bcf5e695aa37ec6569d152ef4a4efa3163d733a3b184f4b75cd1db9","ssdeep":"96:PSuN7xF5x5v9NswzCNQWlh+thsUvvGkspHJmniUCX6gbliAP+g:PSuNXaaCtlknsgcpHIK60+g","tlshash":"0ea18cd08d9450fd65e71ee0ebe6822728560bc9777d479c107008d2c8eda3a6302ac3","first_seen":"2026-03-05T18:29:42.943249Z","last_seen":"2026-03-27T22:35:56.721162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Mar 2026 22:35:30 GMT\r\ndate: Fri, 27 Mar 2026 22:35:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8422,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"875470e0fc6f1e546c5f0a9aa08c22ef","sha1":"1d7d950ee56c73ea6013c5e38286d527304c2a14","sha256":"259331f7112775651ff4e838aa47d86dbc75be882e14f68978097f35ee9c40b7","sha512":"ec10f41244490e5ffec94574bdb9921e1d450e1dee44cf3166dcea4eeead8ea233bf6bb72965e9e4f65970777d5a1f752952e1c5b63d613f55c4e0e31b82232e","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHFNHALNHwNHI3QNHxNHK5NH+:vtfcHjg8ciIbgxemeHUe","tlshash":"a002efe2146f9144bb831cd267cf7e32ad8e61126092d0796bfd1dd99cebd22026478d","first_seen":"2025-10-01T16:33:31.039205Z","last_seen":"2026-04-17T09:59:03.466754Z","times_seen":1538,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":113,"dns":1,"connect":17,"send":0,"wait":33,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/css/style.css","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6946feaf-4a53\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUImzZ8vs3KN2zh91Nx30Q19bR1FlQ8%2FAnWs47qNds2Q9yCRlSH0XR9yxHcDbyaCvHpMsgAdD3Z%2FnTEiS7vXMdvs5U8cA2nlfLmzoslNPwfnCWs%2FI5Xvce9y0QFq7vH58%2B85Bhc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56edf15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19027,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"84e66676d1605b58752040aff4230942","sha1":"15cc17fa6103fd37abbe17c5a2db80c1184b57d8","sha256":"885559559bcbee30d13fad25b9de3d3df239cabe31109b7605eb731649688b24","sha512":"5abba7703e5111b3dfa1cd8cb4055302a075d7b13e0669f85915e8a9f5593c63be4867a4338794efd2404a3c53f8cd38ab3c19415dd0fc0c9c8bb37e14f12b9f","ssdeep":"192:m1xo6sKPFnsKPfdyXzK+ysr2sKP0klK+TFoFgcPm0wzLy9Z5xSZwbqoKSRgjlK+U:Qomd0bqFoFgcoybxbqoKSRJF","tlshash":"5782dc6726a552007827cc9937cb5f6663788417840ae9fc3eff550c8fda6e5829238f","first_seen":"2026-03-05T18:29:42.926127Z","last_seen":"2026-03-27T22:35:56.722222Z","times_seen":17,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/stats/item-1.svg","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/stats/item-1.svg HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6946feaf-1f7\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypPH7i2Qv9DJOQ%2B0ErnAHnQ1uA7XJrJ10bUy7LZtCiy%2BW4wyVBuqWVUf77plEgK%2FOs66iUhDO9a1CK1ucYYfpvyXs1WvhbpvfKNaZ3BliKLyAxMk97DeO416qZkBbkdfMyRg8Eg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdf65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"364b78570905ac19701fd49746b2c4e9","sha1":"1411c5f3bfd018e2507c845838faf46d013a6dd1","sha256":"ac07d8f564ea099c8dca63f8b5e8a19bdad7579e36b664c8f7c26abbd8e92061","sha512":"8fa2b153f272ae709ea5317df7ea9d0a1433df78d3ba04d805637c0d6a040e145a40fb94d55cc9f76ccd75b2b57c8213679c8eb943e40a8884a81c8a0e386398","ssdeep":"","tlshash":"7ef0e929639c5f6ea5260610c3177234913702265846a75688322630b55098fabff9e8","first_seen":"2026-03-05T18:29:42.933395Z","last_seen":"2026-03-27T22:35:56.722757Z","times_seen":23,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/stats/item-2.svg","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:29.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/stats/item-2.svg HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6946feaf-5e8\"\r\nexpires: Sat, 28 Mar 2026 22:35:29 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9WdD9FAMsDFc7zXSd29LLt%2Fs3CM%2FBGX7JtU2UbTrqMMux1xOMGythA7c3DxpiULhf4EtGwjwwSMvMX1YqmXo70luSatgyYl74I1JGNzFpTV2xDKyAE0LMeAQrcBu8p43nbOD5E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de56fdf85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a573f36d1c2851a1d71b5737a7507ce1","sha1":"ef20375e4eaa7eb16a6a3cf5d57ac11382ea45f6","sha256":"90bdb453c4d85cf5ffb971523c2448c997b840befecddfa164ee2397340edb65","sha512":"67ffcabca81dee99fd068f05af096263679e535a2eab7a4c4541b87a2ad9da566ae2b752ef4cf49449513564bc17332a5a69961e395632ea442b5a8b7aca4eee","ssdeep":"","tlshash":"93315f5a5bac0cecf4120b78d761333cf22a79621695d25989223178a72618efd7f8d4","first_seen":"2026-03-05T18:29:42.947189Z","last_seen":"2026-03-27T22:35:56.723556Z","times_seen":23,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--80aa3avhgl.com/img/hero/background.png","fqdn":"xn--80aa3avhgl.com","domain":"xn--80aa3avhgl.com","tld":"com"},"ip":{"addr":"104.21.96.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--80aa3avhgl.com/","date":"2026-03-27T22:35:30.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--80aa3avhgl.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 09:10:37 GMT","end":"Thu, 18 Jun 2026 09:10:36 GMT"},"fingerprint":{"sha1":"41:01:74:DA:D9:CE:B5:FF:D4:33:EC:E6:F1:74:5B:9A:F0:F7:E6:D4","sha256":"10:56:A0:2F:10:64:29:13:B0:3F:93:6E:B8:E8:D9:21:68:42:AE:01:E7:F6:70:43:D1:B8:A2:31:C9:89:D8:21"}}},"request":{"raw":"GET /img/hero/background.png HTTP/1.1\r\nHost: xn--80aa3avhgl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--80aa3avhgl.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 22:35:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1088669\r\nlast-modified: Sat, 20 Dec 2025 19:53:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6946feaf-109c9d\"\r\nexpires: Sat, 28 Mar 2026 22:35:30 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3YzppCDT2vBAW4xD%2BehAbWraxHU%2Fh3pUR5T%2Fqlo9jhwgp%2FpSSjFaP7d1dLooW08FXEP8d3%2B%2FHkCUVIZK2VP5QFSbkjrJ9k9DeTU9e71brM%2Bp6sYohxo3ByQdBLpwfDstECPiZYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31de596e7f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1088669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1360 x 726, 8-bit/color RGBA, non-interlaced","md5":"11a3cc395f2ce65ae1cdf562cfc35992","sha1":"5905744515c0b6937492f4521d5315cd3ee48f81","sha256":"55339b53d6f3a4f6b02ca6314c09bf42b84f706b95477f3214fecc1c8c411369","sha512":"6c7cf748e579e85a4376b0708347de4a523a09e1c488be5bd48416a7f7306e33f2b40dee7dc040fccb94a21961788c54fd90b0542a78e2a442f0e07ee3e508f2","ssdeep":"24576:45VmFgX3J3JthKmlRzQpfHFu8oEI3cyrg1/AB:cN53JthapwoaQAB","tlshash":"692533dd8fc2b10e0c09e935e2efb557e57e2943f26b0f16c2b494a023558641aade39","first_seen":"2026-03-05T18:29:42.923263Z","last_seen":"2026-03-27T22:35:56.724093Z","times_seen":19,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"xn--80aa3avhgl.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"xn--80aa3avhgl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}