{"report_id":"c6880db1-b7b8-4b58-aea5-282f1f9cd16a","version":0,"status":"done","tags":[],"date":"2026-08-16T20:43:14Z","url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"title":"Delta Executor for Roblox - Get Delta Executor Online \u0026 Free With Key! | BloxPan","dom":{"size":254987,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45250)","md5":"d67520dca22b65cd750d0138f511b83c","sha1":"7a86eb897e022ba4044ee7186461c2e018e2c9b9","sha256":"41737019890d1fdddbb409bbca44b9e4677b78ceaf32e511a1aadacf392061ad","sha512":"1a7a7197b4c6e13c2069bc1e18f2a8795cf42a704c93c57122a845973905c716335ffbab070871eaab77e8730c04c591d89d571823a3d7f991cbb84154f306ec","ssdeep":"3072:IimhAyMEVhMLLD6XN9FrTAVNAIaK5hR4Kk2u4vTAVNAIaK5hR4Kk2u4/s7D:IimhAyMEVp9FARZcHj3RZcHjl","tlshash":"fe440a2125b0013b189744f2f252af5ab62fb283cf07e5b9b5dc51101f8ada6ce9f794","dom_hash":"domhashda208ead3c124bd5acdb344c4638a56e","first_seen":"2026-08-16T20:43:17.607847Z","last_seen":"2026-08-16T20:43:17.607847Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T20:43:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-09T22:45:53.985835Z","alert_count":0,"request_count":3,"received_data":363152,"sent_data":1713,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bloxpan.com","ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-06-08T21:43:43.620834Z","last_seen":"2026-08-16T15:24:39.223791Z","alert_count":42,"request_count":21,"received_data":4751742,"sent_data":14274,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":5,"received_data":140245,"sent_data":2835,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-10T08:03:00.460584Z","alert_count":0,"request_count":9,"received_data":236075,"sent_data":4968,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-10T09:00:58.423729Z","alert_count":0,"request_count":2,"received_data":408699,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-08-14T12:30:49.11326Z","alert_count":0,"request_count":1,"received_data":114018,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":9204,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-17T02:11:48.965784Z","times_seen":49569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce372f55869fb07843180d5fe923988e","sha1":"487fe57a2e7103b4b93be62cf85dd67057dc8470","sha256":"e18984e8b8b5e318e2f78242b56ffe4fde5522c2d05e3cb2e1e0543e6dee12f8","sha512":"ef3cd3df9ce2f57f5971857020b724402bd27b4187c1c70a40d61123a38e45fe162e47336708c7913c006ab290b468c8c5289cb113c1ae013546e9cc5205967b","ssdeep":"","tlshash":"150127c699b20e6bc10b55aac2cb0459316da1935c3b6c26fbdc10058f9c08c5bed31d","size":779,"data":"","first_seen":"2026-08-16T20:40:59.622666Z","last_seen":"2026-08-16T20:43:17.64083Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"09d04f5cf53970adb46b87bfadec4196","sha1":"3094013d627a0385a2cdc181dd35f601fcef178a","sha256":"e760e6071695b76dd29b4597d9c93dbaf284cf5b1590ab5b2024a24ba348543b","sha512":"15f4da2274a399fdef812049b3ed08d0c3d49ed4b4e0f853047ca7b1e7563008a9a0b2f75a48c86243c28ad3a1eefd406c8d539dee78c4d72fc73729e1f0cf69","ssdeep":"","tlshash":"4e51fe3276a2103444ab5f9673cb978c732490c76554ca5a3a3dca8f0fc2a1828fd7e5","size":2623,"data":"","first_seen":"2026-08-16T20:40:59.624103Z","last_seen":"2026-08-16T20:43:17.64155Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd71a35c3eed9e3a06bbef3f628c089","sha1":"489f2b1fceb13bd3db52cf106da6a942d3e33cd1","sha256":"f20766c48fe7cd8ffc91562963485b500adb5ad7cb09fb8ad7015448a68cf3af","sha512":"78d05a85bc30429acf1281bdc56a5e76c30fe2f0c85da7979ea3291a468f3c8dca9b7f68e3ed2f3370ab100b3a5882c91164c2263635e81f41617de72582b0f4","ssdeep":"384:f8HkI330BJ/inM2umzyEzk5LXPqnSbhOORPRqf4dXnIT+q4:Eg+M0bY5WSbU2lTq4","tlshash":"2ae2862a34b3083189ab05af63d7d38936235043b846c55cbe6cdb105fa6e81e977bdd","size":32469,"data":"","first_seen":"2026-08-16T20:43:17.642075Z","last_seen":"2026-08-16T20:43:17.642075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"eval","is_inline":false,"md5":"f5065e29b55efcd0e513c80d22ede48f","sha1":"ac7aba6b4eb8e00a77fab7a0335dc20fb3cc1a08","sha256":"7d2606cd61f5f102c53bdffe958eafd587d5512ab5918b2e9a3379fe9d0e3c62","sha512":"ef0357461348c5f122f46112350e59e034556a6d00f0fb5b7be78c47914c2d6198a7565960fc964fa82fc10f9ddec48540ec9a56c959ce40adf992533bd5d470","ssdeep":"384:qurExmZXauYwDffsZ35dv9KPiJ4pWeIVSeO:K1hVE","tlshash":"9d52c70475b2502201c32069ef975a071028b243d946d8edf6dd96607fabd98cafffd8","size":13884,"data":"","first_seen":"2026-08-16T20:43:17.643111Z","last_seen":"2026-08-16T20:43:17.643111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.527Z","timestamp":1786912954527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hreJ3VkJjQ4mkaUTtk%2F%2FiNo6uHSLwIb5PlQUa5K7mi%2BYvLO1mNPZ95gwG828xCkHm6sYohRXf%2F%2F5nST%2FkQksCxb%2B34gEXnyBQ%2Fj%2FSau%2FpwmxSmdzTyiYcGPUUTPfyb2DT410jVIP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a2c3442decf435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":19757,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-17T01:34:38.628182Z","times_seen":60048,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/3.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.495Z","timestamp":1786912955495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/3.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6704\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-1a30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6704,"size_decoded":7050,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc0239e53a8f839543e173d87d8a718d","sha1":"e6155d01cd34cf39f7f74459a16b1de9f105a69e","sha256":"31fa4bff01bc9ccea0c801fb6f3cc439af074c6dab3f46ca7b7dde551f7a6025","sha512":"2bfa299925778483715401d5fef1b704a6f1c729a9b78e000812de09ac4bf0e39501c5f1dd6feaf9052238cba027be7d739561b1d2fde2fffc03b76e0a4c2c21","ssdeep":"96:1qDeD6MVUgCGAPAbMiM259BpcjrPkkSAt7VEPoEtF69IeJsFXfPJvWPFeg5:zVCGOAbMiM9jAkxlOoSF65JyBme0","tlshash":"e9d19db411b919e46ecb3da24e58bf20457acf6d9d9342107325a0d1d820bfd52c8ed6","first_seen":"2026-08-16T20:40:59.610437Z","last_seen":"2026-08-16T20:43:17.611534Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/5.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.499Z","timestamp":1786912955499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/5.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5182\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-143e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5182,"size_decoded":5528,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"487bcf034dee49e4e88a8997555ab518","sha1":"53087e660f552b133e399a9d48a247f55a16ebdc","sha256":"f52f5c8b87f71f82437e95bfbdefcaa89a73fea72024396d3374f707c34f7e56","sha512":"5b4dd5be659866b7d7b486e7748be9bdf9c81869ef8534e91add846fe58879e0db0dc5ceb8bdc54a3322fd9ba3bbed328f68ce81cd04dd020731b42d1a67a8f7","ssdeep":"96:tz6rNQCYTEACyfqDIM0azaz8lqAwZqYwCQS0I1/wjbO8jJTxKXfhzR7ErKLc:56rNQCYTEAFiDI3a2Ub+wCF0I1/wjb1T","tlshash":"67b19ea39434a28457083ab8ec478e783225c8f22edb4196fd21e0544f92725f1dd7f3","first_seen":"2026-08-16T20:40:59.585806Z","last_seen":"2026-08-16T20:43:17.612703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/design_6a23e8e6934032.45750963-bloxpan-logo.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.540Z","timestamp":1786912954540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/design_6a23e8e6934032.45750963-bloxpan-logo.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 399471\r\nlast-modified: Sat, 06 Jun 2026 09:31:18 GMT\r\netag: \"6a23e8e6-6186f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399471,"size_decoded":399819,"mime_type":"image/png","magic":"PNG image data, 1767 x 376, 8-bit/color RGBA, non-interlaced","md5":"5af353be4c575c7280e7b41f76a399e3","sha1":"3281fd4bbd4368303b6ff4935641810ebbe08a81","sha256":"9b0076e59a13644fb75f7318f40f1ac8571aaad75985bd674398d1ab3c4df833","sha512":"45bedefd8cc3e21ef717abf9743c96551b141c8cd800bdc54439f65b2beda0452fc3a1f2e5a24280a500d63b5502490143550f90e34bb308c333a04c0e19807b","ssdeep":"6144:+WuX8qacN1aBfmg9EpL3EiqkV+l3F17gTPoEg+jA+ScHhfFEiUlxqbYXqpvIE:R08fC8f7EtEiqThzynBvzUbqZpvIE","tlshash":"068423b864d0e30d899bccbe9871df5b32aba265d8d4102589344d9e38a7fe250c4ff1","first_seen":"2026-06-08T21:43:49.145016Z","last_seen":"2026-08-16T20:43:17.613306Z","times_seen":8,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.935Z","timestamp":1786912954935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 3660043\r\nlast-modified: Fri, 05 Jun 2026 19:11:18 GMT\r\netag: \"6a231f56-37d90b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3660043,"size_decoded":3660393,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"d9a9b851888ce8124132d8c773427790","sha1":"3fd3146108a95454525b4a6044f07377416acf54","sha256":"1b4939f42777b9d121529e05cd381fdfb1f91ebea3f5b9d80eb302fdb862be9e","sha512":"03fc118ca83bdee9b948cec47684a3b9f8e7f8d2a70a64874e8bfb938c775182e440ee36bbbcf6f8a0ecb6b867d16edf375393569f4f821231d91e0c22113864","ssdeep":"24576:s1vFpQo1177PaU4gqhVTPEFw5+5Dt5RAG6pD9evSc5Hk:YvHn1177iPPBPEztNAG6ZwvV5Hk","tlshash":"a8252399e5c107f78563262b467f1e1212dd323c27d922dd5e37ed49206afa32a01eec","first_seen":"2026-06-08T21:43:49.168382Z","last_seen":"2026-08-16T20:43:17.613849Z","times_seen":8,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.137Z","timestamp":1786912955137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305314\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-17T02:05:11.731436Z","times_seen":20452,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.460Z","timestamp":1786912955460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305314\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-17T02:05:11.731436Z","times_seen":20452,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/1.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.488Z","timestamp":1786912955488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/1.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5542\r\nlast-modified: Sun, 07 Jun 2026 07:50:25 GMT\r\netag: \"6a2522c1-15a6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5542,"size_decoded":5888,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"345bf3b096d0d97d22c1f85f88c65998","sha1":"3c0c72722531aec7046f3b3c1d10d9a9ed8ec000","sha256":"006a4cc842a2cb4f6385cb078b7dc95b24438079a60bc8f0431c3d12b0cd2f73","sha512":"e7974454cfbd66a639cb3136c1a8329121a5fd2b337f14f0a7dfda1eb7d3eb19164761b4b1a8d28c1ea765390e61b9d13095adbba08fc78d11005da478c7d056","ssdeep":"96:+julMJv5Omw5MvTm+cQYKaZBZjRSK2qPLmDEmu/iIEusp6EPkA5122W8tWHWPNFZ:OugvVwia+cQdUBvSKwUI6akAHWAMWVFZ","tlshash":"3fb1affe6a8134096a3401ccba2d3702514eccc2de5d020d77ac75e5ac1982a1efbadb","first_seen":"2026-08-16T20:40:59.604143Z","last_seen":"2026-08-16T20:43:17.61515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/gb.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.490Z","timestamp":1786912955490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/gb.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c34433ead0569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 718647\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:35 GMT\r\nlast-modified: Sat, 08 Aug 2026 13:05:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:yL4ecgh5ikrmku4ek3Bl1Ji7KedBlD9hcrKRGLjtgGY=:\r\nfly-request-id: 01KVG9WQ1NEG05N8Z151WNT8PY-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1170,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dcadf6916764560c2f1fec586e2c1de","sha1":"161ee20a0a75bb06d4f2ca9acdbb137d9a963cec","sha256":"c8be1e7208798a4ae692ee1e937065d498bb29e741943f6172b29118b8ed8066","sha512":"b925b9042182dc31f953ebfe2bbe666822bb9a56411fc1045d46b5b20e68effe25bd6ce65cad1bcee3ef9008768bdb8221f66573d8daa27c60a8d004acada0a1","ssdeep":"","tlshash":"a0f09ec8d32d7045c70793104cbcf8e3d4d962ce559400dab4d09ae4216e7a7d8d7d91","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-17T00:38:30.705722Z","times_seen":4207,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/jp.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.496Z","timestamp":1786912955496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/jp.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c34433ead8569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 718633\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:35 GMT\r\nlast-modified: Sat, 08 Aug 2026 13:05:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:v+qAuvmYk4PcS/fKWU7ZW+DfD/Elv8iNC/qHjrAZgCI=:\r\nfly-request-id: 01KYHV8G2R3BJJE3JNRAEDZM5W-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":1178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22e3b3a4abbb24945620817fd27ed7db","sha1":"b5f2d0d5127becf2f525f44adb8ff9f8c8d67150","sha256":"bfea80baf9989383dc4bf7ca594ed95be0df0ff125bfc88d0bfa878eb0198022","sha512":"4a8bba04821d24b29af1c50bb80b8fb0f14b90ef09beae191f4ee60e4d1820723889ea86e6b404901305787c466caa3ea6667f4f3290e4f1f6110e7b63cda01d","ssdeep":"","tlshash":"63f05ca4a6f9880cce284629cbad29c5572ea0c6438a40ddb1941a597f1c27716db2f4","first_seen":"2023-12-06T12:02:13Z","last_seen":"2026-08-17T02:02:03.246473Z","times_seen":1602,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/fr.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:55.571Z","timestamp":1786912975571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/fr.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:55 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c344b14d69569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\naccess-control-allow-origin: *\r\nage: 813369\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:55 GMT\r\nlast-modified: Fri, 07 Aug 2026 10:46:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:jNrMjXm88hDNyid3osDeH55YYlJod70wJsnVns3NRXg=:\r\nfly-request-id: 01KTBBW3M47XZGT7PG9WNQSW7H-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":231,"size_decoded":1029,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4cae9b80cd98ef576670139bdb167d","sha1":"a761902c65cfdca4058ce0c9d5f8eac667cd6118","sha256":"8cdacc8d79bcf210cdca2777a2c0de1f9e5862526877bd3026c9d59ecdcd4578","sha512":"bb6b5de936dfdb7f7aea85e15d22ef5a15bbf020dd055d9d0423cd59972ab6aef642db2c522435b14cf92535432fa9ea1f7c31ee4eb5f01543dcda89d4292d83","ssdeep":"","tlshash":"5cd0a7a9d32da410c74447200a7c75c254a5f0c9a48411cbe890049522190f69cc39a5","first_seen":"2023-12-06T12:02:13Z","last_seen":"2026-08-17T02:02:03.262905Z","times_seen":2436,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.533Z","timestamp":1786912954533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::hp96v-1786912785593-1bcacc82b67c\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltaIRT8gCKdwQk53aeGL7ZvefZ9tr9sSjkPvFArUcs%2FCWWD8uaRfDINuGx%2Fne3TseN5fSB3%2FWrqn56y5PWKYQrB3TIgrdqSnEhZ8HtlpoIgb3TrrozLfhZVyorAIybgS1FiBRpE%3D\"}]}\r\ncf-ray: a2c3442deb580b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T02:12:15.421798Z","times_seen":17928111,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":5,"connect":5,"send":0,"wait":10,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.928Z","timestamp":1786912954928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305313\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-17T02:05:11.731436Z","times_seen":20452,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":18,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/10.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:58.404Z","timestamp":1786912978404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/10.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5438\r\nlast-modified: Sun, 07 Jun 2026 07:50:24 GMT\r\netag: \"6a2522c0-153e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5438,"size_decoded":5784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87bea7edfefd61bb3d01b8bf2530d2c1","sha1":"da304bbbf0006993add59aecb7140f1f7dda9d7d","sha256":"eaba7410e14c08bda6f2e57d9d0a982a654b7e37871409091f97c23e2933ca5c","sha512":"815ddb62d4e9e99a12e286789e3e400f2f1675dae4e5c5a2fdce1cc671f757123397708d48bd9f26030a734dff1d0975e5b8eb9f166b91959d1f9383d110b655","ssdeep":"96:D8R0JT2pilvK8bj4kbq2HIe+zK9jp16CFDnbX7ty47yzdIyo37MBFUo:w04mKA8YIojp1bDbByKD7kqo","tlshash":"b5b16ef8d4c2e7c8a83e43989b5b1d16573a337b45a69086f14955941c1fcb37c86bc4","first_seen":"2026-08-16T20:40:59.608343Z","last_seen":"2026-08-16T20:43:17.620515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/it.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:43:07.794Z","timestamp":1786912987794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/it.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:43:07 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c344fdb8a8569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 985594\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:43:07 GMT\r\nlast-modified: Wed, 05 Aug 2026 10:56:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:n6iBGIGNm2SDj1eOK6vMo9BjCu0htcM7NK/3rFzlBrw=:\r\nfly-request-id: 01KYJ0X2W1G5QEDHVKSAQRG9HN-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":289,"size_decoded":1067,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d72a5dec3acd073763570e3e5fdf784","sha1":"25ecff80eb26ef79709ab7278eb3991ac8cc2734","sha256":"9fa88118818d9b64838f578e2babcca3d0630aed21b5c33b34aff7ac5ce506bc","sha512":"dee0b0cae09b07705091cd7371f40650d09fb1fbd736e60fa2716679a660b515a0c74bdfcdb5a9d32a178870a14697010b018c417ce30402f5ffa42c8b8384a2","ssdeep":"","tlshash":"33d02bf487bda414060843344b3c35d259b660ca614420caf4d018a0250d1a75cc39e9","first_seen":"2023-05-05T00:41:36Z","last_seen":"2026-08-17T02:02:03.240709Z","times_seen":3030,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.930Z","timestamp":1786912954930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UU9MY7t%2Fhwip0iHurpxxNRqV%2F%2FicSf3tzriAH5oXwcrwRveNTxdhPJbV7pSKlJFJXME3zQWiieqwrGcTIAXHkALJBu1TKjj8C6Ckt1l3L0qaeeic0YoWso29B0W8KtgP6sctNMOv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2c344305ca6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151110,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-17T01:34:38.622108Z","times_seen":45458,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/6a23e76aa5c5f-cover-image_2026-06-06_112449526.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.245Z","timestamp":1786912955245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/6a23e76aa5c5f-cover-image_2026-06-06_112449526.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 361416\r\nlast-modified: Sat, 06 Jun 2026 09:24:58 GMT\r\netag: \"6a23e76a-583c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361416,"size_decoded":361764,"mime_type":"image/png","magic":"PNG image data, 1000 x 555, 8-bit/color RGB, non-interlaced","md5":"83bfc88587db44fd71791b5fea82d171","sha1":"fcb823adbd83cdccb8326daeba59404965bbee62","sha256":"2e6b3a1f0ac5d02cf798d2d2f547b6593bb7918f6d186e2bf6c8e2bc504c73d7","sha512":"9d0dfefbdefeb2bdcf7324675814ae32ad680d43e523bda0947f8b7810e30b7afa7134020ce8439e657b5f5e0c4ced74bf7de772fcf6ccc00cea838c83048038","ssdeep":"6144:fnSmSDDHinh8aggqhXD5acwRST6Euv5KWd7OMDOsNGNrtMHD8yv70p:fnSmSDDCJgphXDgcf6E2RdP8W8/","tlshash":"897423dac4326ef4e85f564709aeb4f1220a22307bfdf21a183ad95c0bbe5f50215f95","first_seen":"2026-08-16T20:43:17.622936Z","last_seen":"2026-08-16T20:43:17.622936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/app/favicon.php?src=%2Fasset%2F6a231c19e85ab-image_2026-06-05_205547225.png\u0026s=64\u0026r=14","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.353Z","timestamp":1786912955353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /app/favicon.php?src=%2Fasset%2F6a231c19e85ab-image_2026-06-05_205547225.png\u0026s=64\u0026r=14 HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/png\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6074,"size_decoded":6270,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ed87dadb7263b7d9ff048fefc540898c","sha1":"0d8619695d7cbbc54b7a0c6336b65a6c6e660710","sha256":"a76962a88e1e681e1570e6ba3bd7ddbb289382e262450be6cd1a1349fab81a31","sha512":"bd43d4558fe0e2f91fb89b60cdcb8ca685d36e1ebcdb29e048d671a7531711295dfe6155a6e025d84630f69c225df3859b7910b8b11b70fcc571ca3dfe728f11","ssdeep":"96:Ny3fmGpvprPNd9hvy84B42OrKOC6Kdy1UDgC+tu0j2BexiuPCHrUb:NyPpRrZo142BOC69zc0jCbgCH4b","tlshash":"fdc18e4958553e2c89635d5562672afad72f2a09266023064f3bf94f36e4e2c30c6e37","first_seen":"2026-08-16T20:43:17.624158Z","last_seen":"2026-08-16T20:43:17.624158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/app/favicon.php?src=%2Fasset%2F6a231c19e85ab-image_2026-06-05_205547225.png\u0026s=64\u0026r=14","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.355Z","timestamp":1786912955355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /app/favicon.php?src=%2Fasset%2F6a231c19e85ab-image_2026-06-05_205547225.png\u0026s=64\u0026r=14 HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/png\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6074,"size_decoded":6270,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ed87dadb7263b7d9ff048fefc540898c","sha1":"0d8619695d7cbbc54b7a0c6336b65a6c6e660710","sha256":"a76962a88e1e681e1570e6ba3bd7ddbb289382e262450be6cd1a1349fab81a31","sha512":"bd43d4558fe0e2f91fb89b60cdcb8ca685d36e1ebcdb29e048d671a7531711295dfe6155a6e025d84630f69c225df3859b7910b8b11b70fcc571ca3dfe728f11","ssdeep":"96:Ny3fmGpvprPNd9hvy84B42OrKOC6Kdy1UDgC+tu0j2BexiuPCHrUb:NyPpRrZo142BOC69zc0jCbgCH4b","tlshash":"fdc18e4958553e2c89635d5562672afad72f2a09266023064f3bf94f36e4e2c30c6e37","first_seen":"2026-08-16T20:43:17.624158Z","last_seen":"2026-08-16T20:43:17.624158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/2.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.492Z","timestamp":1786912955492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/2.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5118\r\nlast-modified: Sun, 07 Jun 2026 07:50:25 GMT\r\netag: \"6a2522c1-13fe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5118,"size_decoded":5464,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86031ada0b7b1fb0c761d6c438363a7d","sha1":"68f872f1b4e2962682636cf78ffff2538a55a314","sha256":"20a52c7c2e0b39bc4ac60107f22773060886aec2d3dcf80aeaceab9b15cfe634","sha512":"35e8d26a8849b7771b8f9e06468ba3261a231a26d923a8415ba019ea5470f2dd5f2d7b1320d50ef437e050fb8a585a402ec8a026e988d202abbe9f3ba2986fcd","ssdeep":"96:Sx2JLli7H2RBtvjst/XIBbjWKAdxza/bwd1XLKu9xqQmVptFuN5e9xmGxh4OBW8V:62JLobm76/XIWnPG/b0GQ+toN5ImGUAd","tlshash":"35b17d0ea4d6390bb0573f89307745f4103815a1b9eed768a4f14ac08a7a3a31fea11e","first_seen":"2026-08-16T20:40:59.597426Z","last_seen":"2026-08-16T20:43:17.62515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/9.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:55.566Z","timestamp":1786912975566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/9.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4846\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-12ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4846,"size_decoded":5192,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"839c111a136c5dc09bdef7f73524912b","sha1":"d3c202c5855a6d859aa3d77231cb80aa13741bff","sha256":"a6e7a11c30dd2f179dd7c49bca5657a161e56af46764e9b3cbf413410d71b782","sha512":"e1d6fe3dcdafee23e2bb41f83d18fe7ef14d2a694317e83efc4ce12e4e254c5af4c362c99afd2099b20153d92c8c45fee06e3e55ec9b0186a379ee6ba2d7f51e","ssdeep":"96:MOp2SWDtMWGdJNY603kMXWJacGjE1U0PCHtP5vO8vEOpPeEAFd/WBOhC://GWWGdJ+603VWJ8jEq0KhFO8vEOZeEV","tlshash":"78a1afbb2947f22ba00549f564f0ad1eb24356b56f42005a50b1e04c9cfb642cdfdf24","first_seen":"2026-08-16T20:40:59.581117Z","last_seen":"2026-08-16T20:43:17.625771Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/se.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:58.408Z","timestamp":1786912978408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/se.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:58 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c344c3089a569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 5585153\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:58 GMT\r\nlast-modified: Sat, 13 Jun 2026 05:17:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s7UHHmwdSg49uCi6tcff1o0OkPzzslsV6aLE+Wwfeck=:\r\nfly-request-id: 01KTJ9ARSR9ESKT5WG6XZ75VAS-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":1038,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79da0f189e8fb82d6e148a77b5690e14","sha1":"4ab2d42d683c4e74ade7682aab2584071841ca9d","sha256":"b3b5071e6c1d4a0e3db828bab5c7dfd68d0e90fcf3b25b15e9a2c4f96c1f79c9","sha512":"14d46434039fad5b65caa36f1c9cfc0d473c23aeff4c08f43a014c65d350231acbee528f633ccd87fa60ad9f8f90a5947e1ef486ed06d6cbaf7ce80f469e0c1c","ssdeep":"","tlshash":"b5d02399d13e5d14455486010e7c74c54165d0c5618010e6f4d0091510559fb5cc35f0","first_seen":"2024-05-09T16:52:27Z","last_seen":"2026-08-16T20:43:17.626435Z","times_seen":732,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/11.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:43:02.613Z","timestamp":1786912982613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/11.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:43:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9060\r\nlast-modified: Sun, 07 Jun 2026 07:50:24 GMT\r\netag: \"6a2522c0-2364\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9060,"size_decoded":9406,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec33967efd5c4d7e1154e3bd8708830f","sha1":"77e4b87b78e10b734dcb4270066ebd2cd91dab2b","sha256":"46249181f202e6abecb4def9f2dc24d6034f023558989ea01d2d995ee6f404db","sha512":"f6e7932d68bd0c97a2c2b7f78ab4456952e1a29c2bda15cbfc5f2144929ce2b2207880942e8c1083be7815898f9ac4a40996313e905791955f0184b4ae66dc9f","ssdeep":"192:692Fx8aYuyuAu/J3wbqMOTgRjuhMmw6U2e6YV53s1cBbM:M2F/eJ6JtTgYB1YV5xB4","tlshash":"9412b04b17ec5ac5dfec2e50f91c28b0d931dac4e9126a2a691f0075c2357d1eca36d9","first_seen":"2026-08-16T20:40:59.594427Z","last_seen":"2026-08-16T20:43:17.626948Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/26e3N3l.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.543Z","timestamp":1786912954543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /26e3N3l.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Apr 2026 09:52:57 GMT\r\netag: \"db8e5ac15ecb37d491947fac9c031459\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: n2wU7wHdCywXxH3xfjDMcrxrIOTp88-_t2nMrJlLucVx4JMkgy0K-w==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 3565575\r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\nx-served-by: cache-iad-kjyo7100058-IAD, cache-bma-essb1270035-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 67, 0\r\nx-timer: S1786912955.651995,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 113259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113259,"size_decoded":114018,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"db8e5ac15ecb37d491947fac9c031459","sha1":"3fe00f5f25d35cc2f86bb3faf71689077fa4592d","sha256":"526d6f37bf6f687f6056b1e659d39ad9aef3599e0d633740368784ed2c175deb","sha512":"6e839166c462c96fd7a3b809051b40172f5ca9c00e0ff9422bd2a5394f910baf8ebf3b7d7b6bb31ba9bf867447133175a4a02dfcd6273f6bad60e5eb198b0031","ssdeep":"3072:iJshnBKxaIspKI7aFboaIlGujXKt1qXFKL8k:iycnsEIm1CbGIwL8k","tlshash":"91b31226a3d969322bc1344d6446dcb256a2170c106ecb64e61e3d34fb987ef359cccb","first_seen":"2026-08-10T19:21:30.899253Z","last_seen":"2026-08-16T20:43:17.627584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":73,"dns":0,"connect":9,"send":0,"wait":21,"receive":20,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.932Z","timestamp":1786912954932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305313\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-17T02:05:11.731436Z","times_seen":20452,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":29,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/7.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:45.703Z","timestamp":1786912965703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/7.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4666\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-123a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4666,"size_decoded":5012,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30d7e954ea5bde18aeb5d8b7144c70b6","sha1":"3a6357a404976e60e689bef76bd4e8f7596ae896","sha256":"86853a644bd3ceb4203aef556be8db727b380bc8ef98a3c570b6fb4d99a67d28","sha512":"b3e8c0407e7e1f8df844d823a3237aa04b7d93176ae73cad52a814113537ed537ecd1da32592b1dd833e8a7860a7d684b22ffc490d0376049f0246decfbd90fb","ssdeep":"96:VQSeDyJvsIPtaC4gqe37gy/I21hrRdj3bVy2pc5OUAN3GSINLsIghAr:VgyJU2qigy/ICtjj354YHoyS","tlshash":"36a16e205b782278409bef78db372034f1b981b9b0c6b5c61149bd6e3516b2969346ff","first_seen":"2026-08-16T20:40:59.598898Z","last_seen":"2026-08-16T20:43:17.628634Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/12.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:43:05.393Z","timestamp":1786912985393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/12.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:43:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6386\r\nlast-modified: Sun, 07 Jun 2026 07:50:24 GMT\r\netag: \"6a2522c0-18f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6386,"size_decoded":6732,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3614471a636d3a8c7afbed45eb24a139","sha1":"d8c63c87cdd6609b2b75d436d87735ac66eb5eb0","sha256":"ae98d99b2808a154d9e534eccbaa855f172c65bfb328eb8400028e5183ef2359","sha512":"2bfd9af0bad267fcbbdbe9175902cb79e27eeef740217584fd9599732bf0c2a7dbca2857137f195cf00e2b30a69361ef57f3c5251434d95d3c85ba6355159fc2","ssdeep":"96:UABfuBTCRGm8+cDqmyJe+b1OwUBWNEjKGVoNp0UkpXR2VrL/4O59bOAp7:zdHRG/+cmpEW+jwL0Ufj4O59bO47","tlshash":"34d18e8d5f16817cfc4e781ecc1b2f846a365027ff2deb7d2455e4a2381d91b60e5095","first_seen":"2026-08-16T20:43:17.629092Z","last_seen":"2026-08-16T20:43:17.629092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/rs.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:43:05.397Z","timestamp":1786912985397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/rs.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:43:05 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c344eebe04569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 813376\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:43:05 GMT\r\nlast-modified: Fri, 07 Aug 2026 10:46:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hAqbAO7zYDa34v6AfZxutt3JT3ewtkrFuWL73gUMNog=:\r\nfly-request-id: 01KYXRCZWNK6A3ENEZ03ZVVR31-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184172,"size_decoded":51591,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47db251119b67e07aaf9d1365ec2ef17","sha1":"cfb40fc4931e657f068b17a4f7f952469348f2df","sha256":"840a9b00eef36036b7e2fe807d9c6eb6ddc94f77b0b64ac5b962fbde050c3688","sha512":"825ee78c8f1e656883999bdfd31de8e6e0d37d4c7de55a48dd403f1c03d2a611c1e3a4089d77afaa677f4c5c124d94d36cc631421138830a16f445ba21a97b7b","ssdeep":"3072:qnh0fqZ8NA4ogkUiy4cgx4yyg44zfgq55X6mOTHM4JsM3E0IuxAF0PQ5eOPnpmg7:qcwSRax","tlshash":"9a0470385aa0d3ba8e83cafccb3ccda8500e514b8973c762556955980bd79cfd22d4db","first_seen":"2024-08-19T16:44:24.464701Z","last_seen":"2026-08-16T20:43:17.62998Z","times_seen":85,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/13.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:43:07.791Z","timestamp":1786912987791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/13.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7126\r\nlast-modified: Sun, 07 Jun 2026 07:50:24 GMT\r\netag: \"6a2522c0-1bd6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7126,"size_decoded":7472,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30c51a704cdafa5682e43979b4e67d1c","sha1":"9535fc024744dfe078bb70f50e70255f93e18dba","sha256":"5ed228669d4ead02348cc11ca503bc00c46dc25eeab7d9d64df5e171ea7cd529","sha512":"20f74300f672de34cf0e8b05c92eed75b2c4ec4646916076f99cab595017f5d7bf7565ce5792672177ce18073ad61c966635286a0b923372b1a424b4ee2ebbb3","ssdeep":"192:2Low+5FPvBxoDeRUtzoIxolhkhKg+tkWxTl:Ej+nPfooUtz/+l0KBkWxTl","tlshash":"5ae1af7963a13500a1cb46df0912afb1a466b4f99c8cf939121f9b1f43f0868137b156","first_seen":"2026-08-16T20:43:17.630568Z","last_seen":"2026-08-16T20:43:17.630568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/6a231c19e85ab-image_2026-06-05_205547225.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.541Z","timestamp":1786912954541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/6a231c19e85ab-image_2026-06-05_205547225.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 31594\r\nlast-modified: Fri, 05 Jun 2026 18:57:29 GMT\r\netag: \"6a231c19-7b6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31594,"size_decoded":31940,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGB, non-interlaced","md5":"f7122dced1ab94421b57cc6ba85124e0","sha1":"0ce824f99c8fe6f9a4cb907e6a2fabfa41366584","sha256":"b1503b4b813a890cad18c8ea4daa7b118f1ea4c2c0e747e163cc310ad65e14a5","sha512":"71775db8519875a8c4c51f0bfd5a0ed5acd8d703164a97e4a940a3e221f594f342106cc9620348ec1fc54c1dcc0b659e25cf9c5a9b0c08f29f2a2c657d463f7b","ssdeep":"768:1WxOngU3KTo0CxOfrUYWUkIa83JupTjXaUVlrIKPPffeSEG:aaaqxuWUj/3w1jXaerIMPXek","tlshash":"c8e2e11208df4c75532a24c7278b69d18f63fc6173fa1866bcbb92089414913bfe68f9","first_seen":"2026-07-14T00:22:36.85872Z","last_seen":"2026-08-16T20:43:17.631914Z","times_seen":4,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.575Z","timestamp":1786912954575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1753214\r\nlast-modified: Thu, 30 Jul 2026 09:47:27 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvMfSTkt78zNBY6Ca6ZNaswbOuoqfgCgB7wUJHJ8SgftnZI0kOS4qfRaBhxPG6OhSXVTrgj8C3DhtfDRHKdXTil6Ts%2BfxYyhRSfC8LR0RgT93HtrQhRNd9sbo7LifQrwKJuneos%3D\"}]}\r\ncf-ray: a2c3442e1b6d0b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":127118,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-17T02:11:48.965784Z","times_seen":49569,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/app/activity_log.php?app=Delta%20Executor","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.246Z","timestamp":1786912955246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /app/activity_log.php?app=Delta%20Executor HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3979\r\ncache-control: public, max-age=20, stale-while-revalidate=60\r\nx-bloxpan-cache-hint: activity-log-20s\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15384,"size_decoded":4323,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"fa201681446df0106e053c8a77df1de9","sha1":"646138fd0f44442915356062419422dabe4c24e3","sha256":"03a7eb23fb71c4206a164741c87d11b5311133056b3e15ac56b85fd8fd6c39c3","sha512":"a1186c6b738fe57bed7d5c98c66d1946e8403907d266342983e4ff13f7396fffe42e7c198f9e7473c5176afb4199856b9f26e73ebdbd7d45a0b01b46482c46d3","ssdeep":"384:Z8urExmZXauYwDffsZ35dv9KPiJ4pWeIVSeO:C1hV8","tlshash":"1762c60475b2502201c32169ff975e07152cb243da46e8bdf6dc92607fa6da8c9efbd8","first_seen":"2026-08-16T20:43:17.633109Z","last_seen":"2026-08-16T20:43:17.633109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/us.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.494Z","timestamp":1786912955494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/us.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c34433ead7569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 907426\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:35 GMT\r\nlast-modified: Thu, 06 Aug 2026 08:38:48 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:575CQM9XmHkmZzcI8JIzvhq2vfNazHuGvTKiY/GXoqc=:\r\nfly-request-id: 01KYJ0SQHC2WE5M67FTBFX4ASE-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":648,"size_decoded":1192,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-17T02:14:27.70448Z","times_seen":4467,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/hr.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.498Z","timestamp":1786912955498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/hr.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c34433ead4569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 5327412\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:35 GMT\r\nlast-modified: Tue, 16 Jun 2026 04:52:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:lp1PR7Z2KzH6+dzMQJ9vPt+xn1D7WY2NuAJHVM0zA8I=:\r\nfly-request-id: 01KTG77CZYQGZ6MSCVPD557PRW-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":41177,"size_decoded":16849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba47c14c2e26d64c704e3291fe023470","sha1":"242b5b0ae548deced0d675124fd21bf0dd0a2332","sha256":"969d4f47b6762b31faf9dccc409f6f3edfb19f50fb598d8db8024754cd3303c2","sha512":"6a7791d0c3e08b43303a4681abe93f7a65c8673756674d0a70df6ea9f4097fdc05b27d1e8c9d20aa78f03e8889587cb1037edfc112d790d03272bec49bf58af2","ssdeep":"768:KzAMBw1DFYf/tkB1AcRWyh+XcnLdPL6Iiti1gnGWkxm:KLwwlE1AcRWyhUcLdT7Ii1gnvkA","tlshash":"6003e07c8a6c93ec596be3ac9736d464670de1b6707bc3124eadc3b005c38dae657881","first_seen":"2024-05-09T16:52:27Z","last_seen":"2026-08-16T20:43:17.634945Z","times_seen":109,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/ca.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:45.707Z","timestamp":1786912965707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/ca.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:45 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c34473a987569f-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 718679\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:42:45 GMT\r\nlast-modified: Sat, 08 Aug 2026 13:04:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:bxg3hBIAro1yVfduNfzMvp3ksI3If+AVDn3wuAYyfOQ=:\r\nfly-request-id: 01KZEZE9087V1R4RSH270ZCTJY-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":642,"size_decoded":1263,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2594215477ecbfa1d0f8d2dadb358a8","sha1":"166e97af30c344dcb918a0bca66325d875670bab","sha256":"6f1837841200ae8d7255f76e35fcccbe9de4b08dc87fe0150e7df0b806327ce4","sha512":"2d38a81ae660e6337fdfa48de6ad6ab666b53a5463ea2892c617ea8b0c9648ba3a6f315f1d92b4a74e2c222730adf9af2f965aae08c680c0a3840073fde96317","ssdeep":"","tlshash":"18f0d34c939d52b4be308b691a3424c4b84ea0ef51d053999554945837621c9adc94c7","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-16T20:43:17.635577Z","times_seen":155,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.934Z","timestamp":1786912954934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305313\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-17T02:05:11.731436Z","times_seen":20452,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/4.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.497Z","timestamp":1786912955497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/4.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6672\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-1a10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6672,"size_decoded":7018,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6387380b45682e33b85abf789e5b528","sha1":"653fd5251da9b6ff9f293dadcf83b2eaf310ff61","sha256":"910181bcf5a8b093650a332e9f92914ab48fbb5db127df91850e9b19278bcba4","sha512":"189d9fe1ba2bf0a474dfbac2bce46b980debaf9deeece0582dad8a104552cb1dbb2dd6a504e932f0c5d96d4eb1900451c88fe509a1c5474a09b9b5ae0fc684e3","ssdeep":"192:8/KqJ17k51E2w7VkIXJA+8OurM5GVbc0oTgcfxQo7lY251:8/KKw22+u3+kr1bHoTveSlYk","tlshash":"abd1aee2a8d70580c9f19972a0056b7f4a70a3ecd04a5b471aafd3eb3474599bb04392","first_seen":"2026-08-16T20:40:59.616924Z","last_seen":"2026-08-16T20:43:17.6362Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/6.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:40.040Z","timestamp":1786912960040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/6.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4510\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-119e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4510,"size_decoded":4856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cc7744b6aa33767f93bf479b7872ae7","sha1":"74014bbc4883e8516c76d9e2b1dee5a252a9f0d2","sha256":"44d64b14363ca8fface30a0ed62b133f0204c06c7d4c4ddcc99c62f9114d68c3","sha512":"802c818bc6262fb9d3e4d114a6984c005b2ae81a7ced65740a82a73b1d4e1c27759c590e133c8a0c3a0a8ee85b8ddde7625aa57e8ab3a9501cf77e52f4bb9789","ssdeep":"96:M31ZI7b9KPRk6sgrcOOuKM5NBC1HiZkkhFwEmq1mV:m1m9Ak6VcOOuvIY+kfUEmV","tlshash":"06917f2a4d3c8de5d92ff0708111791dd6466632844ddb729adee124ac4edb32d9ecc4","first_seen":"2026-08-16T20:40:59.619696Z","last_seen":"2026-08-16T20:43:17.637298Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/8.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:52.135Z","timestamp":1786912972135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/8.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/executor/delta-executor/\r\nCookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; tz_app_slug=delta-executor; tz_session=a7ea23cb4334de59961c; bp_dtrk_b0921b0f14160e7c=1786912954\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8534\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-2156\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8534,"size_decoded":8880,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fafbcabca44e3945d0eb2933a357de34","sha1":"8ab6a44415d1dc6c319a540454da634f4e3f0c44","sha256":"6819a9cfad86ac3c54149bdf350175d48544391950235a2e03f30d39d51802f1","sha512":"fa3813c33b908302881727a62eefd0d2b1042e89b8727332e08b55b76d67143f34a56bb191be977c0939872d8ddbdca6127c04fae7a8c6fa0cd6fa1aa8c3c98b","ssdeep":"192:2jXonGcO/kkclc2IeyIM25P/j3HIakenl9rwHtW:2LkGcOYlDIdgjTl9rwHtW","tlshash":"fb02b06438f3a56aea899c6435fc41805c72c272759bc42e5bb39946b233f00ef51fc9","first_seen":"2026-08-16T20:40:59.621176Z","last_seen":"2026-08-16T20:43:17.638043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/executor/delta-executor/","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T20:42:33.835Z","timestamp":1786912953835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /executor/delta-executor/ HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 28306\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=7m6ciulcve686qq625rfunjoml; path=/\ntz_app_slug=delta-executor; expires=Sun, 16 Aug 2026 21:42:34 GMT; Max-Age=3600; path=/\ntz_session=a7ea23cb4334de59961c; expires=Tue, 15 Sep 2026 20:42:34 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax\nbp_dtrk_b0921b0f14160e7c=1786912954; expires=Sun, 16 Aug 2026 21:12:34 GMT; Max-Age=1800; path=/; secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"7m6ciulcve686qq625rfunjoml","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=7m6ciulcve686qq625rfunjoml; path=/"},{"name":"tz_app_slug","value":"delta-executor","quoted":false,"path":"/","expires":"2026-08-16T21:42:34Z","raw_expires":"Sun, 16 Aug 2026 21:42:34 GMT","max_age":3600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"tz_app_slug=delta-executor; expires=Sun, 16 Aug 2026 21:42:34 GMT; Max-Age=3600; path=/"},{"name":"tz_session","value":"a7ea23cb4334de59961c","quoted":false,"path":"/","expires":"2026-09-15T20:42:34Z","raw_expires":"Tue, 15 Sep 2026 20:42:34 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"tz_session=a7ea23cb4334de59961c; expires=Tue, 15 Sep 2026 20:42:34 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax"},{"name":"bp_dtrk_b0921b0f14160e7c","value":"1786912954","quoted":false,"path":"/","expires":"2026-08-16T21:12:34Z","raw_expires":"Sun, 16 Aug 2026 21:12:34 GMT","max_age":1800,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"bp_dtrk_b0921b0f14160e7c=1786912954; expires=Sun, 16 Aug 2026 21:12:34 GMT; Max-Age=1800; path=/; secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":184540,"size_decoded":29042,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (662)","md5":"9f77a696a154aeeaf09a9504d21f3689","sha1":"33f3f38898010408373d58525808fa246f16d37d","sha256":"b905f812b2c580124d608db8f121e7ae9cb6c1b89348059a084fa118c5a67454","sha512":"b56f23f76bfe96b8e900b8ce14f711156be345bca3a8e2bc801bc72342c9a2a666d8d1e4f5d70a5fa78105c6b5e767ccb5c7b46fcebfd2e4e7cc11241868796e","ssdeep":"3072:8iH6tTXFyTMFlAIKGNRR8SM2O4JTMFlAIKGNRR8SM2O4/spn:8iOXF7R1QzvvR1Qzv/","tlshash":"8b04f92121b1153b00db45a2f2a2ef56a67f9643c743e478b1eca0511f4dc99cb9fbe8","first_seen":"2026-08-16T20:43:17.638622Z","last_seen":"2026-08-16T20:43:17.638622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":62,"connect":53,"send":0,"wait":77,"receive":54,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:34.525Z","timestamp":1786912954525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxpan.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 16 Aug 2026 20:42:34 GMT\r\ndate: Sun, 16 Aug 2026 20:42:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":1338,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-08-17T01:11:41.417748Z","times_seen":1752,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxpan.com/executor/delta-executor/","date":"2026-08-16T20:42:35.136Z","timestamp":1786912955136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:42:35 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Q4J%2FKZZ9olTwKM50f%2Brg9NkSTxgwL2rFkNVwTLqUM%2FmtrjSeF0aqdsa7MkisSufK%2FJ4GwSXbuI9LogMhQJN5tdhQSzibYAPBkABHZPUTJZL2rlkrK7QANCn%2FixMKMr%2B9ilfBABC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2c344319904723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108020,"size_decoded":109012,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-17T01:29:32.412908Z","times_seen":24504,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}