{"report_id":"bef8ae6b-9bf3-4bc6-979e-10262b0bae5d","version":6,"status":"done","tags":[],"date":"2025-10-16T19:30:15Z","url":{"schema":"http","addr":"dancerum.top/home/votero2","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"104.21.91.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dancerum.top/home/votero2","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"title":"Competiții"},"submit":{"url":{"schema":"http","addr":"dancerum.top/home/votero2","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"104.21.91.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T19:30:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"dancerum.top","ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2025-10-16T19:30:15.992597Z","last_seen":"2025-10-16T19:30:15.992597Z","alert_count":7,"request_count":7,"received_data":242617,"sent_data":3586,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2025-10-13T01:59:42.631878Z","alert_count":0,"request_count":6,"received_data":1079810,"sent_data":2622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":6,"received_data":297098,"sent_data":3286,"comment":"","tags":null,"fingerprints":null},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2025-10-13T01:38:36.283918Z","alert_count":0,"request_count":1,"received_data":1989,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":18180,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dancerum.top/static/js/lib/jquery.js?v=j3ZO-7LNswPjAZMl2BEiXq0n1lb4tAOQ3kJ9sUFdxWo%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4e85ddc6e188c8490191794776f22e","sha1":"83b9249bbbcd563eef7546291d0407f0e70166ce","sha256":"8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a","sha512":"d8919c3b49d80e25163e29cd35f8a7f18dfd07880f72bbe3104c91e1fefd68d1d8a59708909ab57215fd2e334aa990084299c368ac57141421a6eca74e080edf","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:/u1zNwcv9qBy1HOg8SMpQ47GKF","tlshash":"7d83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87461,"data":"","first_seen":"2023-06-09T23:20:42Z","last_seen":"2026-04-03T22:27:45.05953Z","times_seen":3916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/js/integrated.js?v=moYrl-EErwJwAQoP6TQ_QY9g4qwmnD0yzfInQsMp_to%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2176e62aaf27224e65037dcd6c993df","sha1":"d8b199c05ed85c634b61b6b5b3206d07744c7b80","sha256":"9a862b97e104af0270010a0fe9343f418f60e2ac269c3d32cdf22742c329feda","sha512":"d3c9288762baa0eef59401a05d26705aca32cfb0c6c43b00408fbaacdb2768d4149d11f70422cc3d2c8418f10f0c1e67d8d869177e9d0b64d57205a31640dab3","ssdeep":"","tlshash":"3d117a19b0a9a6f000bf715d2b4bc30479321407b2188e843c4dddc11f5eda897fa63a","size":995,"data":"","first_seen":"2024-08-19T14:25:04.26512Z","last_seen":"2026-04-01T13:23:27.025593Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/js/lib/sweetalert2.js?v=HiyBfK3a88dgMuh03dod7J7HTjqyjW371hsMQeyBNuU%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc864f06b8f5f387eba27fa77164f63f","sha1":"0d69ed14cc1784e16685654cef93445d775bfce1","sha256":"1e2c817caddaf3c76032e874ddda1dec9ec74e3ab28d6dfbd61b0c41ec8136e5","sha512":"5d6b5f0c21503724e1f35d81978eba5faf3579d7142040c9d97da9bd0f94a9076fda636cb9c51567c7d6ffd8b02afaca8f7746434e5c39976c4241d1bca438a6","ssdeep":"1536:nozSwJTJCyRh+9qodx5BTQ2C5DoUhQYSXq:AVCk+qgTQ2SoUEq","tlshash":"0d73e794ba40f033b6ab4079509bd209b6baa805fca34c44f519d1905efbc4f6673fb9","size":76039,"data":"","first_seen":"2024-08-19T14:25:04.269648Z","last_seen":"2026-04-01T13:40:19.635329Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dancerum.top/home/votero2","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T19:29:52.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /home/votero2 HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGnTymS5l9rzgDlBQC73Jhbd4Ox6k26V0IibdTwn1cLWGCgS18eKGJbTeAUx6%2BwvcwniNhASk5%2BOecfeHc5Yma1Irx5aAqThInQtNg%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: language=en; Path=/; Max-Age=315360000\r\ncf-ray: 98f9f7afccca1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13341,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1582)","md5":"d89259716186664797d3c90cf23c5c2e","sha1":"e167ad07fd245c4a97430588f52254f035947fda","sha256":"5e40931442021de74eea13679acf4c72a15137e5e262de77a83514bff94b7b94","sha512":"fb2bf49d44a11363fe67fbca8ecbc126fc233ff5fa39e51b5d580e494b3ddadb4eb867e78b9b87b910f19b349976d00b2ca3a855fdc0288b655e8d80db55d21e","ssdeep":"192:BNOOGpzpy2i/yFGynYddQ6WVyLOJ68X0CbmHJy3O8X0CbmHJy0+uGsjC:7OOGtpEP09+E3OE+GN","tlshash":"1152856a40f87193524393a19a6a451e7fa6f027c71a8f1836ad8fc05f87dc6cdeb049","first_seen":"2025-10-16T19:30:21.72922Z","last_seen":"2025-10-16T19:30:21.72922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":60,"dns":40,"connect":1,"send":0,"wait":192,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/js/lib/jquery.js?v=j3ZO-7LNswPjAZMl2BEiXq0n1lb4tAOQ3kJ9sUFdxWo%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /static/js/lib/jquery.js?v=j3ZO-7LNswPjAZMl2BEiXq0n1lb4tAOQ3kJ9sUFdxWo%3D HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/home/votero2\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 24 Aug 2024 21:40:04 GMT\r\netag: W/\"17eec7feaeef0800-155a5\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2FY155EhkPBPxZnmwt9udYH%2FaGoqbLwsWd5JKe%2BZ95JAPxq9m3nTvn329OJBiYlNfdgAUIVnqdUvcEv9bpIuuvWSCEaH4YCeGVg%3D\"}]}\r\ncf-ray: 98f9f7b23d6cb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"ed4e85ddc6e188c8490191794776f22e","sha1":"83b9249bbbcd563eef7546291d0407f0e70166ce","sha256":"8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a","sha512":"d8919c3b49d80e25163e29cd35f8a7f18dfd07880f72bbe3104c91e1fefd68d1d8a59708909ab57215fd2e334aa990084299c368ac57141421a6eca74e080edf","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:/u1zNwcv9qBy1HOg8SMpQ47GKF","tlshash":"7d83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-09T23:20:42Z","last_seen":"2026-04-03T22:27:45.05953Z","times_seen":3916,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/SN47Y45D/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /SN47Y45D/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 40554\r\nlast-modified: Fri, 26 Sep 2025 22:34:09 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"d5155ed67abdaed5da7cc956e29a726d","sha1":"5101b80b01b7f421e0fd9e9a76461a94053ef18f","sha256":"ab790f2d30bc34454b54a59a593360f59e4917fac08fc7db56c0480802cb336e","sha512":"e6fd2047759bbdadfafc40be402d0b0abc80db1e8bc5d2770c92bd2f71b004f63dded91722b89f1c270498ca5605d9700b363429ada1653a3423cd1e2ae25f5a","ssdeep":"768:IaCUW8Fr1ZbwWZQsk/wxZyEDukBRHS/cOC/8E3EyFc2KSMk6125:IVUNFZ9FZhQw3hu4RykOC0bpSMO","tlshash":"7803f1c92d3ad4f3f7f2243814f986ff508a0534a947fec66d41f698c924dda0649b22","first_seen":"2025-10-16T19:30:21.742101Z","last_seen":"2025-10-20T19:55:09.44932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":152,"dns":74,"connect":29,"send":0,"wait":198,"receive":82,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dancerum.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 00:32:32 GMT\r\nexpires: Sat, 10 Oct 2026 00:32:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 586641\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T06:46:21.12997Z","times_seen":305651,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":111,"dns":1,"connect":15,"send":0,"wait":17,"receive":30,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQMYaq6wX1R46GYVl-uuuul70zAqScc93yo5Ki8nAp9WE1Um92J66AUYbrREcL_ugXV2ls\u0026amp;usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQMYaq6wX1R46GYVl-uuuul70zAqScc93yo5Ki8nAp9WE1Um92J66AUYbrREcL_ugXV2ls\u0026amp;usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 1176\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\nexpires: Fri, 16 Oct 2026 19:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 16 Dec 2018 19:56:56 GMT\r\ncontent-type: image/jpeg\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"2f23d315342269ad292a5c2f5adab6cf","sha1":"8d46534337244b0f657f36da20ea44ab573604b1","sha256":"9b83a54ec754100e1e476b6c0b447af288d8c8492d4f1fc3d4cc2f0db969ee47","sha512":"6d854d46e43ac1a5a0596807a7495bc05ee36d178c55c428dc1217916bc2d458203ab99ff5a7f3e97c2fd297e1a2d9ffa8689da42ab6a9b6b48a62bc05405631","ssdeep":"","tlshash":"d52154b6c2304507ecf24e7b789f321553e2e106d7446ebf149c8b6475745910c53795","first_seen":"2025-10-16T19:30:21.748442Z","last_seen":"2026-01-05T17:28:32.847485Z","times_seen":17,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":63,"dns":3,"connect":15,"send":0,"wait":31,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/integrated/logo.png?v=IOnBZxPt8vYogLQFAIlQd6JxiO9AloaOz0W7EKdzrCw%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /static/integrated/logo.png?v=IOnBZxPt8vYogLQFAIlQd6JxiO9AloaOz0W7EKdzrCw%3D HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/home/votero2\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 27544\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tI5scW7%2BtR2VZyIQf01OZPCosHVjVlJGa%2BIAcrwVvvpIJkpIeQ9BpSlgMHHHj5vjNS2wDOyt3vYcZkIpnrkzkRjhhBkB5AlrNz4%3D\"}]}\r\netag: \"17eec7feaeef0800-6b98\"\r\nlast-modified: Sat, 24 Aug 2024 21:40:04 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9f7b23d72b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"053ecb0cda1b6092b49957028094af3c","sha1":"b1f93668c137c54b80115111bb502b756da52610","sha256":"20e9c16713edf2f62880b40500895077a27188ef4096868ecf45bb10a773ac2c","sha512":"4faea5914d12bd2c899e39ad99cca0b38296ccf6102b4d1f2ba7ba77407d93197e24aa3d86a429f5220bc7bcbd1f7440ebb8201fde5405e4daa6f11bf28c5744","ssdeep":"768:RkBZxaYs8h2mwqT1pL7/NeJ3ldB2yBljyT6kwIDFrjWX:KwG9w4vRWldB2yHjysIDFk","tlshash":"1bc2e187e47cac5bba197e0d311a671a571df39031a63a3f326971fc11d6d638282363","first_seen":"2023-05-02T00:48:11Z","last_seen":"2026-04-01T13:23:27.008373Z","times_seen":156,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/R0CnvVWR/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /R0CnvVWR/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 192431\r\nlast-modified: Fri, 26 Sep 2025 22:52:45 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 818 x 800, 8-bit/color RGB, non-interlaced","md5":"aa7d58471496725858cf87be633b8fa8","sha1":"24c0a7853479ab05c50a2b6f58f09773572cf92e","sha256":"1c17a053f7ba1dcad5a14ca26df31fd40e4af08599f4c976d261342cccc5b8a0","sha512":"eedc2c16c80fdc73bd5c57fd1de0a493735ae76bc38513bbea3a06df4bcfea78fda01b5372cd950d373d898d23b8da65aa2f555f08fb19a63f765e57cb739105","ssdeep":"3072:ABt63LmttKbAnCN9LPbreUu77F8/I8m4dBafISYrVbpll8FV+L0fndkpSqC+IOYH:AByco4CN93reR7GYnAvcV+L0Bj+IOYpV","tlshash":"5a1422657aaa1f1bc16b1d734174ed2f41c6ba62ef5f203681f0a4c8aff66058c118b7","first_seen":"2025-10-16T19:30:21.755311Z","last_seen":"2025-10-20T19:55:09.437438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":153,"dns":72,"connect":30,"send":0,"wait":195,"receive":234,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 19:29:53 GMT\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17343,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8099fd2908b8ff98a6fa32c13b3c27a4","sha1":"46fb2e3603399fb539bb43d472601b2c22644511","sha256":"f6ec0c0b2c87c966c56dd4a1622440388bf0da1ca5574d266d1994010a78ea10","sha512":"5d35d28aeb01a832abcf499a571a4e8e3f4e41ac214eedb2e4631e7a81352148c5a1ee172a933b22df8dacc01b0af6d1343c22a5e90506ce93e21de72671a2c2","ssdeep":"192:NpRdp7opQpOPpu9R27hpOYu+RV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7D:Nnd1oWQIOrRPQPTzajdfMfPE","tlshash":"a872ac91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac225325b3d","first_seen":"2025-09-05T06:25:47.318539Z","last_seen":"2026-04-04T02:12:48.173137Z","times_seen":2401,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":137,"dns":4,"connect":15,"send":0,"wait":35,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dancerum.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 00:32:32 GMT\r\nexpires: Sat, 10 Oct 2026 00:32:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 586641\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T06:46:21.12997Z","times_seen":305651,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":107,"dns":0,"connect":29,"send":0,"wait":38,"receive":3,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dancerum.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 00:32:32 GMT\r\nexpires: Sat, 10 Oct 2026 00:32:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 586641\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T06:46:21.12997Z","times_seen":305651,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":130,"dns":1,"connect":14,"send":0,"wait":27,"receive":3,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/css/integrated.css?v=N2MZuZUcnPub5-_zce8BcybBkA_OztE4HTEMk09aHVw%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /static/css/integrated.css?v=N2MZuZUcnPub5-_zce8BcybBkA_OztE4HTEMk09aHVw%3D HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/home/votero2\r\nCookie: language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 15 Oct 2025 11:40:08 GMT\r\netag: W/\"186ea742359831b6-1353\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4yOQYub7czYRniEiNCN8ezBMjKieDnRBBfdyDN%2BN%2BLWVUrs41qOCbBC3YN5%2FLxA3f4HJLNfU6bhMJLhY0bYYNekc3o4vP2qdkw%3D\"}]}\r\ncf-ray: 98f9f7b22d6bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4946)","md5":"70486499fed592b5618e882989e7359e","sha1":"120108cd5668572aa24b573fc7b19e4939d12276","sha256":"376319b9951c9cfb9be7eff371ef017326c1900fceced1381d310c934f5a1d5c","sha512":"59a2d0010c63e10cec53bcf29fc620416ec9ad3d9fcea86289346c8e0d8f3cfadf292c18f681211619caf97f69e4a1548ae49e108db4aa30106c367675b5c1b7","ssdeep":"48:mItf5z53vspqkpX8HpXFVYdxmkGK0fOZJPJaTMbLbqfYXHv2EK4bs0oCkQGckTkY:mCBNf4qQX8JXTM4OZJAQ7qEH/blkS36t","tlshash":"64a18c2222553129b527a4663b4653cc32748121f22677f8b477e839ef9d1e317f324a","first_seen":"2025-01-20T18:24:49.854994Z","last_seen":"2026-04-01T13:23:26.99634Z","times_seen":53,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/js/lib/sweetalert2.js?v=HiyBfK3a88dgMuh03dod7J7HTjqyjW371hsMQeyBNuU%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /static/js/lib/sweetalert2.js?v=HiyBfK3a88dgMuh03dod7J7HTjqyjW371hsMQeyBNuU%3D HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/home/votero2\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 24 Aug 2024 21:40:04 GMT\r\netag: W/\"17eec7feaeef0800-12907\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NL6YjdKx8QBV8kvDQaLD%2F6SiIyOn8%2FLUpOIOQ%2FiGwYpd4VZMbDPLlTT4xlw0pL8GFwOzl29B541M0icKejfW7S78WHpHPE34g4A%3D\"}]}\r\ncf-ray: 98f9f7b23d6db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76039,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51998)","md5":"bc864f06b8f5f387eba27fa77164f63f","sha1":"0d69ed14cc1784e16685654cef93445d775bfce1","sha256":"1e2c817caddaf3c76032e874ddda1dec9ec74e3ab28d6dfbd61b0c41ec8136e5","sha512":"5d6b5f0c21503724e1f35d81978eba5faf3579d7142040c9d97da9bd0f94a9076fda636cb9c51567c7d6ffd8b02afaca8f7746434e5c39976c4241d1bca438a6","ssdeep":"1536:nozSwJTJCyRh+9qodx5BTQ2C5DoUhQYSXq:AVCk+qgTQ2SoUEq","tlshash":"0d73e794ba40f033b6ab4079509bd209b6baa805fca34c44f519d1905efbc4f6673fb9","first_seen":"2024-08-19T14:25:04.269648Z","last_seen":"2026-04-01T13:40:19.635329Z","times_seen":61,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/pdvJzHpb/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /pdvJzHpb/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 326356\r\nlast-modified: Fri, 26 Sep 2025 23:02:06 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 800, 8-bit/color RGB, non-interlaced","md5":"5a77b5f7bdda10cd8e072d2e2cb0be1c","sha1":"275fdb4ec4349ddef5c5ec06b5f4ce77b20ba804","sha256":"57f0b8b5095e2ee58c5ee9839f7ab4f2b399d0160b50468cb5efc2d8148a4ccd","sha512":"d02a273e9e5b08972e8eeff1c4653c2a43e5988b543c026ddfda74a4abe860d1b19407d39f8863750f3857613c55e0687aa65b962361e80cbd9f7fbc41a917f5","ssdeep":"6144:mfRKTC1pa65UhRlwXmOlzAVDAClY/gyq55uqXQAIvsob3MsyDhAaMLwKODah:BCNUTKkP7yGTVIvsob9yDhfKgah","tlshash":"996423ba748885dfcca2a52d74783d4ce0f736b5273769e91c58c0a02dd1c66d8d4f8a","first_seen":"2025-10-16T19:30:21.779588Z","last_seen":"2025-10-20T19:55:09.431001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":127,"dns":75,"connect":24,"send":0,"wait":49,"receive":404,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/7YLcJSpr/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /7YLcJSpr/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 282005\r\nlast-modified: Fri, 26 Sep 2025 22:59:01 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 633 x 800, 8-bit/color RGB, non-interlaced","md5":"916f953d8ed2d75f0d63d4606db55469","sha1":"25caa600671bcad997773b8ee2d5ba8fae25d62d","sha256":"c97689713baebbdac755523c9d9c7ae9583cd0eca5743694afdf44e149c4cfc4","sha512":"47c5c298ac26d9a17f80b5b416428abff464b5d2d813679437da02d86ea584cee09632c45a909e7da8f50282ee8c48552af5216c3bd2c0e73addcd596fd10c93","ssdeep":"6144:Ce48YyVS3RBJMXUlbGnIDmMRG0qTs/jXAinr2:VY4SDJMESnIDmynqTYsinq","tlshash":"ba54238a7bd919afc73b45bfec203e25ee81121d41509c3d789660d2e78ed9b16b0e02","first_seen":"2025-10-16T19:30:21.783332Z","last_seen":"2025-10-20T19:55:09.445391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":152,"dns":74,"connect":29,"send":0,"wait":199,"receive":242,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/Kc33GWYy/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /Kc33GWYy/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 117686\r\nlast-modified: Fri, 26 Sep 2025 22:53:18 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 793 x 800, 8-bit/color RGBA, non-interlaced","md5":"5c2a8a131ab181056a171ed65795082f","sha1":"4dc850b7fabf7f4040835bb6ef4bf9b977f1495a","sha256":"6b97df55dc0ce678d5637b89750a680feef60e1d386c343535bbc9587197b965","sha512":"f75bcfebf400b415e4bee771aa4b1d1105ad676148d1a175a3847f875233726c2320c4ff9d06685f63a4c9879c1199de949926b2609fcc3006650f161ef31878","ssdeep":"3072:SkQL2JMRLJV7a7P17nCOrzZwTSA3yK2nT89GhND2:4yKPa7d7HySA3yKKT8GXD2","tlshash":"22b312c0db3961a0e60e0279cae39b543f1d177a61ca1d172afdee876c7e46c1880dd9","first_seen":"2025-10-16T19:30:21.786731Z","last_seen":"2025-10-20T19:55:09.433877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":153,"dns":71,"connect":29,"send":0,"wait":195,"receive":213,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dancerum.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 03:47:21 GMT\r\nexpires: Sat, 10 Oct 2026 03:47:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574952\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-04-04T06:34:26.273643Z","times_seen":7789,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":106,"dns":1,"connect":29,"send":0,"wait":30,"receive":8,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/integrated/logo.png?v=IOnBZxPt8vYogLQFAIlQd6JxiO9AloaOz0W7EKdzrCw%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /static/integrated/logo.png?v=IOnBZxPt8vYogLQFAIlQd6JxiO9AloaOz0W7EKdzrCw%3D HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/home/votero2\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 27544\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBNDa14sMVgD2B8M8Y3Z7k%2BWurvDZYGN4ZfZ%2FhI6DbQwWCQ38F%2FNoFFiDEJUT7Vj1%2BRkIe1IX7%2FUGf%2BH1ITowUPMmtm3GvbOLFA%3D\"}]}\r\netag: \"17eec7feaeef0800-6b98\"\r\nlast-modified: Sat, 24 Aug 2024 21:40:04 GMT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9f7b70dbbb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"053ecb0cda1b6092b49957028094af3c","sha1":"b1f93668c137c54b80115111bb502b756da52610","sha256":"20e9c16713edf2f62880b40500895077a27188ef4096868ecf45bb10a773ac2c","sha512":"4faea5914d12bd2c899e39ad99cca0b38296ccf6102b4d1f2ba7ba77407d93197e24aa3d86a429f5220bc7bcbd1f7440ebb8201fde5405e4daa6f11bf28c5744","ssdeep":"768:RkBZxaYs8h2mwqT1pL7/NeJ3ldB2yBljyT6kwIDFrjWX:KwG9w4vRWldB2yHjysIDFk","tlshash":"1bc2e187e47cac5bba197e0d311a671a571df39031a63a3f326971fc11d6d638282363","first_seen":"2023-05-02T00:48:11Z","last_seen":"2026-04-01T13:23:27.008373Z","times_seen":156,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dancerum.top/static/js/integrated.js?v=moYrl-EErwJwAQoP6TQ_QY9g4qwmnD0yzfInQsMp_to%3D","fqdn":"dancerum.top","domain":"dancerum.top","tld":"top"},"ip":{"addr":"172.67.178.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dancerum.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 05:00:22 GMT","end":"Wed, 14 Jan 2026 05:58:07 GMT"},"fingerprint":{"sha1":"4C:72:5D:9C:89:C5:26:1E:8D:59:0F:87:FA:33:77:3F:B6:DB:55:5B","sha256":"37:7C:AF:66:F2:E0:28:34:FD:B2:47:49:66:CA:56:57:2C:AF:42:5B:29:39:09:46:20:6D:A4:AF:A3:B5:BB:7C"}}},"request":{"raw":"GET /static/js/integrated.js?v=moYrl-EErwJwAQoP6TQ_QY9g4qwmnD0yzfInQsMp_to%3D HTTP/1.1\r\nHost: dancerum.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/home/votero2\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 24 Aug 2024 21:40:04 GMT\r\netag: W/\"17eec7feaeef0800-3e3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XtvxqWq15V0sCr2EHtTaTEILLB9tjEpb%2FTF2OOf4AJHTd45EE4%2BAYysHhOGaN01m8AqUE6e3bX9hdI2j7ThLPatlSmIGe0AyFzM%3D\"}]}\r\ncf-ray: 98f9f7b23d6eb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e2176e62aaf27224e65037dcd6c993df","sha1":"d8b199c05ed85c634b61b6b5b3206d07744c7b80","sha256":"9a862b97e104af0270010a0fe9343f418f60e2ac269c3d32cdf22742c329feda","sha512":"d3c9288762baa0eef59401a05d26705aca32cfb0c6c43b00408fbaacdb2768d4149d11f70422cc3d2c8418f10f0c1e67d8d869177e9d0b64d57205a31640dab3","ssdeep":"","tlshash":"3d117a19b0a9a6f000bf715d2b4bc30479321407b2188e843c4dddc11f5eda897fa63a","first_seen":"2024-08-19T14:25:04.26512Z","last_seen":"2026-04-01T13:23:27.025593Z","times_seen":59,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"dancerum.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/y6Sb626T/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /y6Sb626T/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dancerum.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 19:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 118595\r\nlast-modified: Mon, 29 Sep 2025 11:16:57 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 687, 8-bit/color RGBA, non-interlaced","md5":"4285dd3147b0a366c7a3152116e44a4c","sha1":"db834d4dbe7f20200aa355e439ede0bbd054353f","sha256":"db0c976d01a540f7461676391b1918dcafaf5c13837bf9734afaf8eb4072ca3f","sha512":"e4467fba1d2fb1b3dce31ce1c1a90062ae4f7562a0bc8f0559d7aa800d7a7629926b7996ffb2e480e1bdc4781952f878d463c12940da5b8fa144ed49e36aa30f","ssdeep":"3072:cOc5arNXByJkYyp1k8TIfhfsVLrBT02iBQGndGVpxdC3+plJ3nBkpq1g7uX:m5WV4JkYw6fs/02irdqxymlJ3wp7g","tlshash":"c9c3026b6ef6ec90ce13a0b2a0b62f0773731e5db7e12163e39695bc0d9bc441874648","first_seen":"2025-10-16T19:30:21.795699Z","last_seen":"2025-10-16T19:30:21.795699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":153,"dns":73,"connect":29,"send":0,"wait":197,"receive":173,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dancerum.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 00:32:32 GMT\r\nexpires: Sat, 10 Oct 2026 00:32:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 586641\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T06:46:21.12997Z","times_seen":305651,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":114,"dns":1,"connect":28,"send":0,"wait":28,"receive":6,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dancerum.top/home/votero2","date":"2025-10-16T19:29:53.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dancerum.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 03:47:21 GMT\r\nexpires: Sat, 10 Oct 2026 03:47:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574952\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-04-04T06:34:26.273643Z","times_seen":7789,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":134,"dns":1,"connect":34,"send":0,"wait":16,"receive":6,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}