{"report_id":"bf288082-e73c-4bf0-9e76-86776512a209","version":0,"status":"done","tags":[],"date":"2026-09-20T10:12:04Z","url":{"schema":"http","addr":"xempbuildat.site/","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xempbuildat.site/","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"title":"Xempbuildat | Praktyczne szkolenia IT dla firm","dom":{"size":19557,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f2373d01a5d281c809b61bc08bcc185e","sha1":"eb677ef531e0376651040aa7f60044332ed70e3f","sha256":"3c4bb63bc5f4a2bbda5f95b2dcc52f6ebb241e305cbbdc7a24c10c24dacac654","sha512":"3a6142f2dc9bb9d079645011a6be48258cce46c1df6ed87f9e3b79adc4eae2da935199bd91d3ea9582cb3bbff45b2bf36e4d8dee86870d19c6b4ee80307c23df","ssdeep":"384:v6raiCshulNDOGMAnwtEssjwtErJwtECcwtD8UfmrwqtMrwItDxxBB2cttiBCbcG:UJsb9jgIAjcDH3LzJlfA","tlshash":"cc92a63061dc5cbf410352c6b5b0b775a0dfce30ea6749a2f0ff921193d6c65a9271aa","dom_hash":"domhash0d05a8837a18da22a4870a39e5297a25","first_seen":"2026-09-20T10:07:56.487317Z","last_seen":"2026-09-20T10:12:06.041222Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xempbuildat.site/","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T10:12:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xempbuildat.site","ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-09-20T10:07:53.457229Z","last_seen":"2026-09-20T10:07:53.457229Z","alert_count":76,"request_count":19,"received_data":900556,"sent_data":9696,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xempbuildat.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T13:40:12.210355Z","times_seen":436729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/js/app.min.js?_v=20260225160029","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08d6925aec0898d4f9c3f2770c832e9f","sha1":"ff79f24b4317245c618572029a1c657e10e2e19c","sha256":"e2d37c78760f42679e782a94d7025e70478d2c40627fcb4a9544bba4b30c7392","sha512":"5dd20245fa93a37e20bd69f4564e3a5097099bf8584711f6aec36bcb4e78e6b774e377495f133526de9f5a9617a9686e3d866df552dbba76d486476f88276a6f","ssdeep":"1536:+e8DWwfG5nP1mjJsjPTZT7eob6iUG5Hkmo6BlxvHKyw9oqnkO3XOS5TzcW:lxjPTxl6iUjynS5Tzv","tlshash":"0b9309c9b221b57602e755eb83aa8511b3b10844b449c4a4b1bd8c9b1d7e89813ffffd","size":96019,"data":"","first_seen":"2026-08-18T18:19:51.203522Z","last_seen":"2026-09-20T10:12:06.057337Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xempbuildat.site/img/testimonials/arrow-down.svg","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.618Z","timestamp":1789899095618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/testimonials/arrow-down.svg HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6gacglRKpKLegpNqqwmTH8qy1s7aHc0ZtxlVWhJ7xKdgsAUrSBjNHxa4NXT6AlbLjsLYoeIPotWw4b%2FI%2FH9pVEVqZNrf9TK%2FAozFjyjEN6sZFubdIipEtnNvpbQ22PGvlYY\"}]}\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 27 Sep 2026 10:06:09 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a8302ec-ba\"\r\npriority: u=5,i\r\nage: 326\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e00c039f80b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":879,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"027b61f40c89205afb1ff1936b72e05e","sha1":"8020bc796be01c85cba1ac9bd54d6da4d57fcf2f","sha256":"cf8fe993e111f475a577f1141cd74863dd5ee7e44f19fcf69561bce066d84984","sha512":"006c456a3c808957896dfe4145778955695343f5ccc579ee5c39103ea2b0ab0f5866ecc3fd5b71d133b98611bfdf1caa8f2bdd509ca030c43e5c74564aa43822","ssdeep":"","tlshash":"a3c0226a22088828b0214210df58302442bb8463028c2094e8822031e04e59b2c332ec","first_seen":"2026-06-25T02:50:50.883476Z","last_seen":"2026-09-20T10:12:06.043228Z","times_seen":7,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/fonts/Montserrat-SemiBold.woff2","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.702Z","timestamp":1789899095702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /fonts/Montserrat-SemiBold.woff2 HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/css/style.min.css?_v=20260225160029\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-19240\"\r\nexpires: Sun, 27 Sep 2026 10:07:23 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6PS8o8zMlA8C42CV2zhxy5SI4GegWf6taRip2eyBdIiUhD%2FzBjbyBOac3%2F2D%2FGlWLsp4usJ%2F2FIRtwBJ3yoCs0POiDbqS3FFbRTYou0FL%2B3C92BL2VOgUusJZCx%2BV47aAg0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c042f8db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 102976\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102976,"size_decoded":103725,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 102976, version 9.0","md5":"189933d267ac47d990d41cad662d3d93","sha1":"80c585c95bc559e7d1e57e86a333b475e38e47ba","sha256":"c1f0bd464d628800c8166205d4f257648ad277554bfac5e73dcc728d92918127","sha512":"f55ba742d72568dfd1bebfdc44fae85474a78dd64bf93c8d6801d5a8cf36a5586bb7810cbdd216ef245cd7e9fe353090138ad53f6bcf834b683ac6381b91826b","ssdeep":"1536:dShtieSUl4XG8mKBIVUHMuhKH3XC5Wxgc+mGGGKX7stfIBBMXmxQUp0Z365VuL:MJlLpGIUHMuU2Wea4tka8QS0pwQL","tlshash":"38a3027b960e109a9df0c2707d3346757e6c2527889c0080aba9bd16fdc4a2af25f7d5","first_seen":"2025-09-27T14:13:55.036386Z","last_seen":"2026-09-20T10:12:06.044159Z","times_seen":24,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T10:11:34.986Z","timestamp":1789899094986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCc8JoRQbEhJOIEhK6ql6CXuvNheEFNifN6yCrW2NXig62JnVaoRYTy%2FNxiqmjImuqX6mIyf5VvmBrBxia5u%2B%2BaKhSqZ%2FbqVLAtG0nckqdkpSRGUWDcJNNlHYI97BNDPTgLn\"}]}\r\npriority: u=0,i\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3e00bffdf27b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19199,"size_decoded":5913,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a998eae74c81a886f28d546bfe765f18","sha1":"414ea266ab5015e5488901e5c35ac53f3af99fe1","sha256":"3fe1f5f8e17bdb09f74bfbfa68514162ea2731fa5985d51036699065eb010226","sha512":"656389d1ebd873014116d035ff011f1b0721147b4081af2e8d14fedc504656b375e11c72bafd8de8c256a05ff213dacbe97ba6eb44cd016440fae649130826fe","ssdeep":"384:v6raNCshulN+OGMsnwtEAsjwtEBJwtECcwtD8UfmrwatMrwEtDxxhB2ctNiBCbcP:Hqwf9VCogjcDsn/g4Tf4","tlshash":"fc82a63150dd5cbf410261c6b6b0f765a0cfde34ea6749a2f0ff921183d2c6699235aa","first_seen":"2026-09-20T10:12:06.044778Z","last_seen":"2026-09-20T10:12:06.044778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":0,"dns":4,"connect":22,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.600Z","timestamp":1789899095600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 22 Sep 2026 10:11:35 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ud44rOoAFqbwbQi5nUEKmvbm7Jn4GT%2F071lZrfgHQmXURQyAoGMiJBHJz9xxu5OHMH5JRZuLygCk3VhERSkiq7dQ5f0GchFAPiTjoURQMmxcfYELCAHYsIm7k1%2F%2FtyblXFha\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\nserver: cloudflare\r\ncf-ray: a3e00c038f73b4f4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T13:40:12.210355Z","times_seen":436729,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/logo.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.605Z","timestamp":1789899095605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-4b26\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FVB5yxr%2FUZ2qcRW%2Fy%2BoOUAP3qyVVXNwThWaAe8OPQ%2FDa5m31Q23AjnHq0jc5J3zOPH2MCOAzl1Av%2FQyFuoqYs9DaInZpUxKRL0sqi2kxZT1ylHKm5alKwCSVgGhLzf2VYqp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c038f75b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19238,"size_decoded":19941,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d67ec1a073c1a179b7b7995c02292938","sha1":"23d401f3bdb3d5f52fc47050662175ef6105c3cb","sha256":"b90a0c4e7c0c710825c48274ea4e2fa7e3426acfd7cb2a102f03b3c300851bee","sha512":"b1a435506d960a9743753285eabfe26749fc26d99fde159bf3fe57268e1472aefb6cd9a31525177fcae216ef3dd36f9ce0feda5dc44e9b8bd83630c2c2a3b71e","ssdeep":"384:0pHYzufJi4yW8eG1nBxumxBjl0PoOKfKoUNKKwX+zcwyWmRvszUTiXYSKTPAdd:0pHkME4h8HBFxLSojKZMKawyWmRkzUOd","tlshash":"1682e03b876784e4c010d99c4df10fc42dde3e22d3f57d865a861805adcdeafd84806a","first_seen":"2026-06-25T02:50:50.878351Z","last_seen":"2026-09-20T10:12:06.046796Z","times_seen":7,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/04.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.613Z","timestamp":1789899095613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/04.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-2ba4\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DP9GqQKZ%2F3M%2FedAB8gYEEXiSa6Z0JTOoZp059Ne2bMR2XlTtDQrGIsG2EHEXUFdxZKd61cw0cxlRuGhn%2FDZoFW4y4vFQukwDhDAQX1EMwzj2B%2Bll3%2FAvif7yN96PX1doAkDh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c039f7bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11172\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11172,"size_decoded":11873,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5dc390950f33c36da06a2e82672f9a68","sha1":"3dbce0304250da993f1f04c912b0a5e8eab1ec5c","sha256":"ab7c3466a7d455339eed7e1af159c05785cad427686934965677e241e096bf76","sha512":"f9fc31e802bb3c9c0705c7aad41bce580a50b06cceeee5c1d13bc64bd1043928cfde8b65b8d5f4caf97d3774212a7bbee5f8287ffc53ed3fe0b70d0baf2d9464","ssdeep":"192:94GYG4VOB8Ip9c1ypAJz5PV+f+AZnAimkOMPcq/ThKqADcDXUraBMvqhHry:9BYG4wDjTAz59fAmkOHWrAQDa0d+","tlshash":"e332af4f37448c18ce1b0976859f9f6ac5da8bb462b010a8cafa015155fed0ce72f72d","first_seen":"2026-06-25T02:50:50.884366Z","last_seen":"2026-09-20T10:12:06.047431Z","times_seen":7,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/testimonials/01.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.616Z","timestamp":1789899095616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/testimonials/01.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-5e2\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ruXvvFd898Wuiqm9RLQcP3wBbl4cAKcz0th%2F4fyga7ngAaPICToiYPsRha8dGN9pBP4v5gu6Bbanxh%2FAX2%2B%2F%2F06Zc%2FcSImFBAE8a2bhRyupp2p7cs%2BySm20wFiIiaw3OokOW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c039f7fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1506,"size_decoded":2209,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efb53c900bfbe34980d2c77e4c11b770","sha1":"c2db1fd3feb7f2c306a337addfbac4e66bf67243","sha256":"5262f6f49e75e25395c2bca0b7593a14f12a164912dbdee3488ef1ad183d53c6","sha512":"37f000842ace3cd1c109d41dedccc4ab452119a0ad48cf7d83018c5476ffe15b530aac7e196fb61018809c83798aaec9944d26b80d95bcc8cada824b6740a9a0","ssdeep":"","tlshash":"dd3129890c78ea66c5989a23d047161d423c4d1cc478ea47b3a20cf6c034ff11193716","first_seen":"2026-06-25T02:50:50.888659Z","last_seen":"2026-09-20T10:12:06.048246Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/03.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.612Z","timestamp":1789899095612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/03.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-3026\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65a5V96z%2F3mdvESATSj9A1rORub%2BNoOe6B0UYDCNHciHlQnQiJXI9lpkxNbi2XvH1LxD1bOKhbOtal0%2FKkosmmgIsLOSJvKVMKuLYE%2FRsmSUyKEME7Q8I7KKvp%2Bm3wkrOVoi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c039f7ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12326,"size_decoded":13027,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d7763139637e9f818d0a67b8d8ce50d","sha1":"bb3e00f97722a3c5057e2d1ff786f636b1a8d661","sha256":"4c5f57a67b415595420ac87c7864c713ac6a5235e9be52e60b73f011f268942d","sha512":"9621550155b1b6c80bc98bc81cc94f880808757714e86d8164a0375d09ba3008748f6fffc7cb3e6ebf42487e123bc82b07da7b070fff130a15fd2fdc4f7c4610","ssdeep":"384:RhVhm+RN2zMzKABse5YBcmwIWXeh8wEjCJABIy:RhVg+izXCsqYBcNIWXu8wACJABI","tlshash":"ba42cf2a63c109b1dc4b412cf34ffa80fadc5778618146d0b6e5a0152b9d1aeef3d5ac","first_seen":"2026-06-25T02:50:50.895254Z","last_seen":"2026-09-20T10:12:06.048864Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/hero.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.726Z","timestamp":1789899095726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/hero.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/css/style.min.css?_v=20260225160029\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-41f0\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJTlgQ4Ix%2BAvxAN%2BQ57f%2BCFssDKZOhprv4WCRlvbcKJge%2F0mLqFlJokI2m2JfvOZtChqiYVX7vDxai%2BHgGoOb%2BZLYL3KY9hNN0ZUFa3aNlUyemElCpD3Z5TtZQEvKW7VZ8gZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c044f94b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16880,"size_decoded":17583,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x853, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e84fae03f9c9723391643a12d6fc4626","sha1":"65de617912641a31b4c10482cd6084b7a28bc6e3","sha256":"6592719178494b160384c8c60af8b391a8be6007b00b465828443f7b879d469b","sha512":"19731ae952a97d46b7d2037ce13453a890b0bbf3e100d2e80e43eb4ae84bae23fd4d0aa882a01249ef74f32c129fc7e439404e8e992cd451d51bc55d37147e48","ssdeep":"384:2X7D3lao9G/4yPvXVN/ydNYvegOITADHrSx3bhL+:2X7BQzvWdNYvegDEDeJbhi","tlshash":"3f72c093d9a0adf480429a6f4721463c3863269994c60d4673ad334dbd436bc37dc2da","first_seen":"2026-06-25T02:50:50.890816Z","last_seen":"2026-09-20T10:12:06.050016Z","times_seen":7,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/favicon.ico","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.775Z","timestamp":1789899095775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoQKsVWcetXQKqNBoGh9RIOs%2F0R16l5jpO%2FUetqK1XmdLKxwZcuhq%2FL2JdC2nwoewlv1A%2F%2FyccCqmyRHLK7ZY61MlspmqCMid27y9NNzgq1zF6gkIhezpA4x4v239YxNmWoD\"}]}\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 07:38:13 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a8302ec-3c2e\"\r\npriority: u=6,i=?0\r\nage: 268402\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e00c049f9eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":11507,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c3e038813b23c4866133dbb0da6fc79f","sha1":"7274658c9c61bba63558c09685bcdb68e6ed202b","sha256":"51673b196e7e3ba6f57471450f0a27a82f74ca1f8c49161584bd4f5d8b46f700","sha512":"88f49892a6c6862a810664237f23ad5bcd43d3c0b7191349a22ecd7a0f066e49465280088a673f8d2bbd6ae2e3ad8301926257e36df6d5befd604fd50450c50a","ssdeep":"384:nYgPFwDz9vE7HtCoyKSwwi7wvN2lPPj71:n1PKwHtCouBvOPPjJ","tlshash":"bf62af75b72ad420d103adb6a1269f4d4f2cf2e3032c6ba1b2745ebd2c9d8853da1453","first_seen":"2026-06-25T02:50:50.891687Z","last_seen":"2026-09-20T10:12:06.0506Z","times_seen":7,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/fonts/Montserrat-Medium.woff2","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.697Z","timestamp":1789899095697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /fonts/Montserrat-Medium.woff2 HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/css/style.min.css?_v=20260225160029\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-18c54\"\r\nexpires: Sun, 27 Sep 2026 10:07:23 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpcYPRpc%2BmBoKFomomF1x6FggOl6d0deVRbwrNXwKPEgERTx4LSjOkFXtBwF7pP6037RJNj4O0EYzelDJqCpgE1yFLWK6RZDN83hZ6v7GKKXQgoRKSHJnTeNJ%2B2CorryuX%2Fq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c041f89b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101460,"size_decoded":102203,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 101460, version 9.0","md5":"ccbd5da8b719f67d795dfcb3982fa967","sha1":"cd9b5a17caa7a13ff777bd914705a16c19d84915","sha256":"83455e6d45c855ad64eb280602a9c7dc3e24d38ad65667c91015cf35f060d96f","sha512":"dffd1121db17adc55ec4a9b7714ba56efc7e3d16d12bbc813e0700c8945563db42acd8efceeb65fa979aaef4028299661f4ce7da40be7faf4af8fefc9b1b2113","ssdeep":"1536:zOcT5533F/klPbkNs1G22vL3lZKNKM6NjZ/M87/j0m+0Qd3UTK20Le:acT71/IPbkNN2+blZKkvM8jYAkkn0Le","tlshash":"1ba312629e26fa2cf78155f84f79c32d7739a4a56ee1e7405246601cdf0acf3bda0540","first_seen":"2025-09-27T14:13:55.052423Z","last_seen":"2026-09-20T10:12:06.051416Z","times_seen":19,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/02.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.610Z","timestamp":1789899095610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/02.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-3efe\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scb%2FezOMREJaKK3AYK5O7Lmk3c9hUoVv5jxO%2FWp34iPIjYvH0rB1j53MwsZPjQYgSM%2BjOeLf%2BfnLAXjpEZKxw6xpeX5KpkO%2BJyLc5cS7sJEgrNjAjKbro67O6fs%2ByEPZ6fWI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c039f79b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16126,"size_decoded":16829,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1ddc1da6bfd9a8980e52358e543c1ac","sha1":"b5ffdbf47b0d5fbcd25f783145df787a2e98f625","sha256":"094fc28cca8bb312e2514c35b8631a4f69b29137253d1a4b2b4b4bd96cae5dce","sha512":"116c6c3cef85c00d834b0588293f63ebcea6a776487dde9770660d6d7fce2c01ebd65b25bd620e27ce33813105a69abeeaffd96e351ff5e61c8ff20fde1a1950","ssdeep":"384:b6YvsxahBbYyorEB0TP+wML5qBM/dzxN1AKnoQtn:b6Csx8TorEB0TPhxBQ13ON","tlshash":"a172c0204e50e028d06ae264c2079ebaff897ab197d71da044da73136f6d074e74ad4c","first_seen":"2026-06-25T02:50:50.894156Z","last_seen":"2026-09-20T10:12:06.05226Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/article-01.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.614Z","timestamp":1789899095614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/article-01.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-6838\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwMfudRH0FgrVPUE10toLN3k8punS0UhFd881R2usdgg5IOeaSiaKupZf47qkhLqI3K3rQQSz8ssKdEjCEaOtgYnq5z95RqGaZjU%2FF9swxDGv9eeeB9PN4Um265IQq2cmLwu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c039f7cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26680,"size_decoded":27373,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1279x854, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a657e35ebac5bdd77712f295a17a6e81","sha1":"dca8c36e3f93709a545ba3c4323af551d9910ff0","sha256":"b2d16c2696cf93763b80d9b94dd94c5e5095720ccf9997347e82294fe319108a","sha512":"3ec40a053186488ba88bee989ba0d2500f5b513653ee36144e027a738cf64c9b7ea3dedf55a585dfc73cf3d038b62fb867c41879de809666da35e7b257809893","ssdeep":"384:kXsyz7sWtsS9CldJyk5BZxig6jmGj+cZV8sduXht2UuPn4abGQPO7/JVXF:kXJ7z+ldJVnvFGNdvQ8GQcV","tlshash":"3cc2e1272a21e4ccb1b2788416db3f003875543e9c3d5a86bd8a1c61560afe9ff8f464","first_seen":"2026-06-25T02:50:50.882617Z","last_seen":"2026-09-20T10:12:06.053085Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/article-02.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.615Z","timestamp":1789899095615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/article-02.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-1e73c\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApmaQ8izpNbqcAvIJjGDHc31dzOZ88gTnszi4DX%2B%2BuIn%2FUIeoi63rxY2J9kNKa0AMC4FNlqnrAc7nL%2Bfm4r1ZEiAb3sPfdj9Vphc8FCabbnkLN3qQL8kLaEIpsclehVK4urJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c039f7db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 124732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124732,"size_decoded":125433,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x853, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7127944337bce2f1e143395ab7eb00d","sha1":"20e0a6aec9f48ed64fa875122d3afafa0f48940d","sha256":"30aeebe2cac15b9595b8612c44bb5949bfae4281ebb0eecddb170f0fa71f9cc3","sha512":"e9e8d5c0a656fa2aa9d5cd49b323e5930b55a083abb047339a1c3cbb4a7c833bdf3f10ed64c29ce74196327b9923837458bc4bd10a7edee126a4909f2aedc04d","ssdeep":"1536:VWz8vGHkCmccAty4sIDTxGraNRpSdWZFrFCXY/nncGawL89/FiGmml3U0UZHMYzs:MFtpBrLVjFCXYBaV9t75EPZsYzAbX","tlshash":"4bc31248d735c0f0da87dd59c7b9333ab4c87686069a391344bcafe7fac7aa45320946","first_seen":"2026-06-25T02:50:50.879356Z","last_seen":"2026-09-20T10:12:06.053847Z","times_seen":7,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/fonts/Montserrat-Bold.woff2","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.699Z","timestamp":1789899095699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /fonts/Montserrat-Bold.woff2 HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/css/style.min.css?_v=20260225160029\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-19704\"\r\nexpires: Sun, 27 Sep 2026 10:07:23 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZLy4vR3CcWpb2AFtX9d3FsuZFbyZ6X4vK5IBAWPkcFsyKtzE22chgvh6CBhkrl8UkCvWEIYIUcgs4S%2BYpRimCuH5J3kDRQZll4zwEYMmF%2BmEz5SIc01%2BPHCfmB3ISWAEO94\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c042f8bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 104196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104196,"size_decoded":104939,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 104196, version 9.0","md5":"f4ce17813d0cb2509503d8234cf5ddcb","sha1":"667eb0f60323634ab84892c636b78d0852027bb0","sha256":"d96387ddbbd99dca62722259029e7754811502fea2309f36784e3926851b819e","sha512":"a34f1bd4791af8311cac59c32853cb4f32fe2dca96c06161acfcd97a5e0d4aea3fd3bca505d578d8e39fe03a08ed04fcd8e451a1bfd91c50e8987447eaf1f313","ssdeep":"3072:qJknL8aTJERXGiR7L36aQW287i5usTD4E1G6qR:qanR1EfR7L1QAuw+D4EgR","tlshash":"61a3136dd92bdcaef83325efddf0e0d4f8562aacd4ae0c5219361b51602e67627e4006","first_seen":"2025-09-27T14:13:55.022652Z","last_seen":"2026-09-20T10:12:06.055272Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/fonts/Montserrat-Regular.woff2","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.700Z","timestamp":1789899095700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /fonts/Montserrat-Regular.woff2 HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/css/style.min.css?_v=20260225160029\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-18bac\"\r\nexpires: Sun, 27 Sep 2026 10:07:23 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hChzIzp6vFp3YBfNgElZgEAbC%2B6bg095%2F%2FysoHOnb%2BxhLe7ZI26H9RzpPzcAcGrkQwxENTsE%2FwsydvIg0%2FUy0IijnsmarxRv5KmX6Vdn5nDQx65byC1h8EStZntmmKhOIqw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c042f8cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101292,"size_decoded":102041,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 101292, version 9.0","md5":"811f7aa6a8ccdc5bdaeb66e0cd7e1468","sha1":"5625ca16f9103f567f9520506c1fc5327a343251","sha256":"d829c8183e003b38d1d2710642161b68662bda35bd7c1821fbd0f56a956866e7","sha512":"2e6a2af6de11186a200fdcb0c0b9928f7bfa4d6c2e5fec4cc8a98fad60fbdd23578cc98895b95b02d2b3dc426b4d245a4968cdd0893838413c1dc414a3a08663","ssdeep":"3072:4FlNoVtNIra5TwfRfy0cbP5b5sR5eNWRYS:4xoV7IrUP7d5eKWmS","tlshash":"e6a30200c52bac8dc474a6d5bcda865679ff10615db4c8e0c4b42690daef9a30e7d09e","first_seen":"2025-09-27T14:13:55.061144Z","last_seen":"2026-09-20T10:12:06.055964Z","times_seen":35,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/css/style.min.css?_v=20260225160029","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.596Z","timestamp":1789899095596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /css/style.min.css?_v=20260225160029 HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JoLBQJLRUUOxf%2Fptb8eHerE9wvF%2BTLLWU3L2zcE%2BspkxcbTLuD6bue%2B5cZk2DHY5zlZb%2F7h0lWn4c7tGBEHkNfOCQH%2BayNY66KY0qLsCNsTvWkzm2PYY9n1FZemZmIis6e2z\"}]}\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 27 Sep 2026 10:06:09 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a8302ec-1944e\"\r\npriority: u=2,i=?0\r\nage: 326\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e00c037f71b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103502,"size_decoded":11415,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c0b21538bfb6e169165798c8e2e4d62d","sha1":"f04c30d4f1d541ca9c8c8df049cc4290fa661762","sha256":"648a9e0867562fd8e07cbfb6952fcde406b8974460715533613be8d214e0c697","sha512":"1cf3e9cf3a09993fac04e2489743b7b8a011594a1a74dbe2f212d46f8de0cfdd10fbf5a107fb1793bfc076360ebf4cedb4a4b39a7e1e24a92a7fff59a18ab474","ssdeep":"1536:BMJihoCcZCOud8G8tKS65wqsZCG+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4Kb:feMCAXvD3E","tlshash":"0ca3ff5e7a1ca104bf474b0361df6e9859347448d130098abe2b36c64cc6de7ba73fa9","first_seen":"2026-06-25T02:50:50.881536Z","last_seen":"2026-09-20T10:12:06.056539Z","times_seen":7,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/js/app.min.js?_v=20260225160029","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.601Z","timestamp":1789899095601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /js/app.min.js?_v=20260225160029 HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVsnXe30KHJAewVDgFQAY1sALkCitKN0yv7roT0xPp8fpnKVk18qIyTzRrLJikrBPie2uxVPglmXusCG0P398Bawl2FLxvV0Dr7%2BA6UxeWhNePVXsSl4zumPwdWQCbg6PvYV\"}]}\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 25 Sep 2026 03:29:26 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a8302ec-17713\"\r\npriority: u=3,i=?0\r\nage: 196929\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e00c038f74b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96019,"size_decoded":30621,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08d6925aec0898d4f9c3f2770c832e9f","sha1":"ff79f24b4317245c618572029a1c657e10e2e19c","sha256":"e2d37c78760f42679e782a94d7025e70478d2c40627fcb4a9544bba4b30c7392","sha512":"5dd20245fa93a37e20bd69f4564e3a5097099bf8584711f6aec36bcb4e78e6b774e377495f133526de9f5a9617a9686e3d866df552dbba76d486476f88276a6f","ssdeep":"1536:+e8DWwfG5nP1mjJsjPTZT7eob6iUG5Hkmo6BlxvHKyw9oqnkO3XOS5TzcW:lxjPTxl6iUjynS5Tzv","tlshash":"0b9309c9b221b57602e755eb83aa8511b3b10844b449c4a4b1bd8c9b1d7e89813ffffd","first_seen":"2026-08-18T18:19:51.203522Z","last_seen":"2026-09-20T10:12:06.057337Z","times_seen":6,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xempbuildat.site/img/01.webp","fqdn":"xempbuildat.site","domain":"xempbuildat.site","tld":"site"},"ip":{"addr":"172.67.139.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xempbuildat.site/","date":"2026-09-20T10:11:35.607Z","timestamp":1789899095607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xempbuildat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:47:37 GMT","end":"Sat, 14 Nov 2026 18:46:18 GMT"},"fingerprint":{"sha1":"81:A0:E7:29:54:0B:76:2D:51:29:5E:66:43:9F:1B:BB:DF:A1:F8:0E","sha256":"9E:E2:92:9B:0C:30:4D:35:C3:96:A1:21:A7:D4:33:92:61:5A:F8:44:CC:67:88:0C:A7:2F:47:7F:EC:5E:6F:DC"}}},"request":{"raw":"GET /img/01.webp HTTP/1.1\r\nHost: xempbuildat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xempbuildat.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:47:40 GMT\r\netag: \"6a8302ec-32a2\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9skZ9hUYn%2FYsryDXurivWfeLiwW35GWBhhsxEc6nwk3gO1yMJv89ilPj1gLZxSrTL83fadbXPsuvHwmQ6DBV4lrfrekeSkJz5K4VwhzSLnHiUoplHhxOQVRGUTBZIkKiZLkB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e00c038f76b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12962,"size_decoded":13655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51101c333cc1a8f03081a4b492d7e490","sha1":"11a594882bee11e0ef7d7951a0ba253a7a8b09b9","sha256":"336178b04610dea5efe03b78509a6b14f3b3489b272e044a7724d8273aa5e280","sha512":"f5e3510ca2f7f0fed402a8887302ea78c793f99219b85eb1bed12b3d78a2c502a59fd553122bd8d206ad012b75ed5cac848033efe9e086c1b9a86345ce48c35d","ssdeep":"384:UL3/bVxDiiY8wxEiWWs37z4RYjKKlgFWQGlBbBes:GRxDiiosWs3UZKuVkBe","tlshash":"6f42be48e4d26db4bd248e33c6ce7441a4dcb73836a02d64cbd0d63021bb6ae8f51a0f","first_seen":"2026-06-25T02:50:50.893097Z","last_seen":"2026-09-20T10:12:06.058129Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xempbuildat.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}