{"report_id":"c8ba84a6-60ca-408a-815d-77960c0c2cf1","version":0,"status":"done","tags":[],"date":"2026-09-25T08:08:20Z","url":{"schema":"http","addr":"amazon789.ink/","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"104.21.27.43","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amazon789.ink/","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"title":"AMAZON789 ทางเข้า สมัคร คาสิโนออนไลน์เว็บตรงฝากถอนออโต้","dom":{"size":96490,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30276)","md5":"304d28d430af9e38eef27c16bcdafedc","sha1":"62bd2046dee6a10d8d91a62d9d281b79ca84a8cf","sha256":"7b55a79027117cdcce4f8f5f6140f8f78b5c004ecf208f62a99aafce5950bc03","sha512":"38624ed2a9c4e04217ff12f504f652c167b9903a430a19448cae5bc85b92dd4b3c725f78267f017835797f52ba1dacf2813a4866eecd2f71175552ce599fdbcc","ssdeep":"1536:b1Nne+OFfBzI8bVo1C8n/QEURSPlYgdKas0eY0MWlSU704CXU:b1NnzAI8eB92JN04CXU","tlshash":"869372b3658996637542425b2254f70876a8ed07ff73b8c4b09cd1845ff3f1a6822ee2","dom_hash":"domhash27c29c433b83fcc1e7962d6485b6b9d4","first_seen":"2026-09-25T08:08:27.055043Z","last_seen":"2026-09-25T08:08:27.055043Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amazon789.ink/","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"104.21.27.43","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T08:08:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":2,"received_data":48569,"sent_data":1209,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-21T00:42:51.292364Z","alert_count":0,"request_count":1,"received_data":87516,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"amazon789.ink","ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":20,"received_data":1978322,"sent_data":11506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":4,"received_data":481667,"sent_data":2004,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":2,"received_data":261410,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":9,"received_data":157388,"sent_data":4967,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-25T11:13:37.827756Z","times_seen":32368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e13d74903c59ae04c402fb2ea51e8291","sha1":"906e4bc3b71f87c32a50d90c46af4f806b208ea2","sha256":"7fecc974453ac4fd56926fb29c6ae75d55b60023421e8292bf95fc0f6cffaf7e","sha512":"f1892fb42dea3cb03b773d52566c42459f8eb4b295ad7b6a093a40201894d42c4ba91da08980dd80a5bd7680a6fe8f73d964f4c68d5dba1955db3f7efffb6a8c","ssdeep":"","tlshash":"9cb012f30d27821bd75253c0312b394cc27bb42c1d59c001f415c8801ec012014c1044","size":92,"data":"","first_seen":"2026-09-25T08:08:27.107206Z","last_seen":"2026-09-25T08:10:34.402087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08e74be5716ddb850f7d2ea151e65293","sha1":"bbe9216712c04fdc7eda8d20c7f22ebf8442a709","sha256":"c354c69c487fc8ff5849730e89d9b52a733d3de0856c683b8a911b74acd878dd","sha512":"82eb633cb3fafd4c72dd24bceea870fa60c92d3cd226d40f9af3be7acb303c7dd8544ba86129e357f897b0c024ee9dcb2bc9e52c27919928c3d8ecf2a1bdcdc8","ssdeep":"","tlshash":"4f01f4eab8b71791917710355eee8181b66c080370098d65f4ac58927f9c624c194bce","size":671,"data":"","first_seen":"2026-06-08T01:05:03.586958Z","last_seen":"2026-09-25T08:10:34.402747Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-25T11:16:50.170304Z","times_seen":145762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","size":79150,"data":"","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-09-25T09:45:38.9525Z","times_seen":6539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/script.js?v=1790323625","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"090937bdb279649a5562f48ca3b584db","sha1":"fa5f1ee6a53686fe5b7b655cf6869d9989ef8337","sha256":"e8af941c4a821d191c9b31f43eb001259ad31787a3bd6b6a05eececa2a24987b","sha512":"5e44bd5701fdf867e30dd26f86bfe605ba430a66c21ce44be9375e579745091acee7e3eb09b92c365b7061868fe681e717719a5e2958db870798fb57d83b1555","ssdeep":"384:LDx3oKAALInhcK1WKSoE27Cn728H7tx7tJHjXIM9lRQ:LDx3oKAALInhcK1WKSoE27Cn72Q7tx7o","tlshash":"fa820f0a918b41654967e42a0d3b7d013524a00b3e18eddbba5d92e12fec61dd3b7fce","size":17968,"data":"","first_seen":"2026-07-19T10:43:07.265538Z","last_seen":"2026-09-25T08:10:34.377046Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_Sp1.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.594Z","timestamp":1790323670594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_Sp1.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:49 GMT\r\netag: \"1652-6556af2deda3a\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fdVIC3OU1vPyCtjz0yKvD6EhbKwt%2BCnH8LqZ6TskhoH92AWY7W2qQ8wWUG1fdKbPuYdEI8R86Q7lZBtBdPPmyrKFaKfY91kuOaS3PdrcdK%2FfvASSn%2B0AYPWoFez9tzr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d3e29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5714,"size_decoded":6430,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f99b653c643fc274ded401300b9e3cb4","sha1":"49daa897f6dab8541daa181ca0d1d9bf3822e824","sha256":"0fb34cb077dc056fbefcdbbe46a87a819d61003e52f544a6df541403402edf8f","sha512":"9662304c1d19f3c52bfab2f0e93c2f71053189fc0bac8c6a605b1d045488312b6e94de23a17c92a48f466366a513be81e0c29189efff81fbd4e5d5576a6cbea4","ssdeep":"96:5iUAXqzk1JFvoJ5b49qppCGU5Ha/hNP6c2QcfvYLlqeWZQiMkcjRqChAMxxozfcW:kUA91DviEkpYPc29fv44rANqCAzfclg","tlshash":"efc18c47c0c6d442f153a2348a49a9113a5bcf7c82f643b957da8808d7131f0dbc76de","first_seen":"2026-07-19T10:43:07.254085Z","last_seen":"2026-09-25T08:10:34.389348Z","times_seen":5,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/ic-line-support-mobile.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.608Z","timestamp":1790323670608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/ic-line-support-mobile.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:54 GMT\r\netag: \"8ce-6556af3291b9e\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jtoh7vAdF5bap1W3zTgHorOtAd8aIyy0bwvYIhCtlpgL%2BVPBrbNNhVJ5%2FtZTp0S6Tx6SQWb7kVCTHwGig7D6ccPMyvjeUcQKWVB6SZ3kqzoH4RHIhi4oITYbOwAGP9Nl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2254\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2254,"size_decoded":2967,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff77e6b630c02ef03f84a1849c78f96f","sha1":"3bf0e04a57149804d377373c29489409ffc705aa","sha256":"7793eaca6351a5a65c5ce9dfc9d35c82ccd50f717494b0efeefc30dfeeeb5ad2","sha512":"a302fce15189ec3f3ea9d38be0a7f7d52867a55022f823bc211523877edf8a8eabf2bb78e14ebac6d2c889280e75577aa9dba2400e38dba7da9b1814bff78a30","ssdeep":"","tlshash":"d5414cd36bb162f02d4e4debd690a45b166d19057c68e6c3e0d4be145b8d11428c1dac","first_seen":"2026-07-19T10:43:07.312546Z","last_seen":"2026-09-25T08:10:34.378173Z","times_seen":5,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/dc0162d536c4e34e90311a744292429a.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.676Z","timestamp":1790323670676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/dc0162d536c4e34e90311a744292429a.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 19 Jul 2026 14:36:28 GMT\r\netag: \"662e4-656f7b70d6a70\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFsAzsD6tdm9Z%2FeaABlD6ITzH1uKbLR2fwLAkv2R3XnwsJ906Q8USLBWVZn9FehBOMBZggDYfnvg2jGX1U1UB2U2jOIxDLwGuBQhHnho3HsXqfvzhuOXNM0lvaNeFrop\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899dbe61b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 418532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418532,"size_decoded":419247,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1768x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f8b8528783e5f6b38f4f193176b0c8f9","sha1":"14e8fc3db1449afc633857319084b67f939a5c33","sha256":"de0cee9221fab04e407fcfce968f0f197f44d33a527d5803e67e5b323ab37250","sha512":"85f0d8815795fc23bb0cd084e709599b128deb1e778a3750b25981498331f1b181ac600af9def5d5a247e9ff7e67fe0762adcebe5478425a792c860c609bae47","ssdeep":"12288:+yMmUs330jfuFCKNGf4Lxr/j6xu1HAYgOYf/4WTX//:JMmUsnvUf4LdbxgRX4s/","tlshash":"7494233c1b16a6b425c3346aedfbb2b6b27433d941134752d00476ddea4dac4da04dab","first_seen":"2026-09-25T08:08:27.06333Z","last_seen":"2026-09-25T08:08:27.06333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":910,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_Sl1.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.596Z","timestamp":1790323670596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_Sl1.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:49 GMT\r\netag: \"3300-6556af2d7d14c\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fut42hwWPZ8xCpuKdcRdfIPvqX8oT5V2KxnUFNlzhDSYF38y4VP7j7%2FnX4znPEu3eOiaj4XvYEpB9yRtnSEoU9wUp7F6BkZQRa1Ll31DVDwvDNass2CfurD7piTREYDR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e2db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13056,"size_decoded":13769,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97011ccb937c71d410ce34605704f898","sha1":"c4468b7ebcec53186aece3cda06e19a8fc81d263","sha256":"c75406ff79e4e1beac928552dac903ed79e184465f5f455192c3dacdbd1a5c2b","sha512":"adb7d79b3614fe0f0b94fb8375dc2e6f8007bec882f5da79f342cc1ee8908399fdbdaafcd28a0c428c739d63612396521ae890840a66fba3eaff8c980da81a2e","ssdeep":"192:ke0uFl0/bYZWv62B9MLmtzC7ptZzyXN+qN3TZ4fFu6xp4J2ZvOB3GgJTGOZZ8o6X:fYDDAmtOuN+eN4fF/4JqSWKZ839Z","tlshash":"1742d05d1cf911067a6af8a385582619cb0c990429f8343a07d3cfe47c3b9631f7784b","first_seen":"2026-07-19T10:43:07.316985Z","last_seen":"2026-09-25T08:10:34.398675Z","times_seen":5,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T08:07:49.081Z","timestamp":1790323669081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7eRRE2xK9n4SZmPNYIcEm4L3ZaNOEBqH7NTZlFKewJVbuW8hary%2FuEoSXN5dNrxk9aaEeJnSOWcW24Wmk6lA%2BpjdTfq19286qXjWfW2vMW5tw19n%2FMXuhlykux9CJD8p\"}]}\r\npriority: u=0,i\r\nx-powered-by: PHP/8.2.31\r\nset-cookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-page-cache: HIT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-served-by: amazon789.ink\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a40889940bb9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"05c9c6c25e8cc45ec1bd23e4e0faacc2","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":67000,"size_decoded":15439,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2007)","md5":"9f48525465227b1ece6846bf3dea2906","sha1":"176cabebb0303490647856c40f1379d671bd43b5","sha256":"cf79dac9ff2ace76dade17a7544a69d97ac739555104719682207800dc3c1f81","sha512":"7b86d121b83a4b5d1b5c90a8fca125cbf1b1d86248efe1e14adf66fdb8028cb6ff1eb457781637f2e13184468dcc844328558e0fe98e3c3d1a6833a04edc13c7","ssdeep":"1536:CLHne+OGfBWlC8n/QEURSPlYgdKas0eY0MWlSU704CXa:CLHnzsB92JN04CXa","tlshash":"db536473609a5a61254212973229374a6a68ed47bf33fcc0b0dd11996ff6f11d823ee3","first_seen":"2026-09-25T08:08:27.069094Z","last_seen":"2026-09-25T08:08:27.069094Z","times_seen":1,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":25,"connect":19,"send":0,"wait":405,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.012Z","timestamp":1790323670012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\nage: 1329716\r\nx-served-by: cache-fra-eddf8230034-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85875,"size_decoded":14160,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-09-25T10:07:02.36653Z","times_seen":11181,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":16,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.015Z","timestamp":1790323670015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 279282\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FkukReazQ02Qk8usH7J9fevWyIKxymkhsyEzfcklTCOBRLXa8VP3ydnPbWW%2BfPQXX5wBi4ZkYZ1xbtpkBpXclh%2F3PCtCt9V2vw1VDMAF4aaw%2B2IYxPnfDO6TzRcMre3SSZhluhpZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4088999af83569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103009,"size_decoded":19942,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-09-25T08:10:34.39985Z","times_seen":13424,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/21ddedaf2093b6b11ee445d077821684.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.030Z","timestamp":1790323670030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/21ddedaf2093b6b11ee445d077821684.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 19 Jul 2026 14:53:12 GMT\r\netag: \"8906-656f7f2e8ef72\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mAtijmImD6Ur7VqcQgFA03fJ8UhjJSpNqaBbB50Ig0eQ9DvrVm1lrb8832GlsSdslpXgDo%2BDRQnBSSUQe%2B6MXqtjzPHgjvmG6RIotoIpWTB%2BR8EPK9jt4LBuMhFIojn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4088999bd3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35078,"size_decoded":35795,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5dfe865b2278980b472eaed6b41c7f7","sha1":"2bd0e9ba36eb3e8921156f7af2d7116e31cedcbb","sha256":"2a93fce8c38ef36d40219abd555aafd75a7369d9c7761e32721c520a8b0d6e01","sha512":"6d554d27674f77a2d257a4b73ff18ab839657656c81e5819cf69b8c52f6d1c891edfb70f1bdcedee64c10c587b1357c207db531bd6e8dff71ed7248a71454ed8","ssdeep":"768:+TcZbMh+BzmJmbe0Mwpdd2NbK9e11JQZJ48hB5imhZrQ0nsbYGEETB:nZbMIxben8rY+uL8kmnrQ0s8GRB","tlshash":"9ef2e11b2b0506afe4fb09be916bca0141d7983faa6d287940d1094e4bfb4dbf1272c1","first_seen":"2026-09-25T08:08:27.074379Z","last_seen":"2026-09-25T08:10:34.400932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":366,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.566Z","timestamp":1790323670566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 267761\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hc%2FuN3sHFIKOtuj2V2DkMrPRRNGNqAhKRauiFCWEoYaMbjPA0zBTGHFeeiseboqBF4KuDemzwOMiSa0vuFvnjDiwtd99t3yeQYPythBschPDww9D%2B8hxsTFYhem3BE1uau2PBs6E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a408899d1f4ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156400,"size_decoded":157397,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-09-25T08:57:34.783057Z","times_seen":14662,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5KPxWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.574Z","timestamp":1790323670574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5KPxWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13784\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:29:10 GMT\r\nexpires: Tue, 21 Sep 2027 16:29:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:47 GMT\r\ncontent-type: font/woff2\r\nage: 315520\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13784,"size_decoded":14597,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13784, version 1.0","md5":"14f1963c9f4e44b48dd3aa287ae0e07a","sha1":"c9086cd45cb25020c82c874d7a72a2c4463d1289","sha256":"ac40cf0d115bc06bdde46dcb264db6ea887d6eefe36f7f8286f3342f1facf078","sha512":"be20d8dbf89599d857543da2b8c6bb3f6fa97589ef3df1e760819337b53ea2df093d40eb13f7681203280247e58955d7e2582dc93d120bb5ec63191d0f45a0e6","ssdeep":"384:thbYwTsfc3ecRU7xHQqy8PXBbaovjOpTQ:XY997xH17ZbBvye","tlshash":"4952c0d849a547a6e61b82f1d54cefc23675030ce499049857f26bfd8850b6eacf2273","first_seen":"2025-05-04T12:45:31.736924Z","last_seen":"2026-09-25T08:10:34.401547Z","times_seen":713,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":38,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.583Z","timestamp":1790323670583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 00:04:19 GMT\r\nexpires: Sat, 25 Sep 2027 00:04:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:40:31 GMT\r\ncontent-type: font/woff2\r\nage: 29011\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13156,"size_decoded":13968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13156, version 1.0","md5":"c07742e521297bde26c5185952cfc0f6","sha1":"f5a7b42db16291d5e84760cccf298dc3b01218fd","sha256":"20aee722979a0f91b2baac3d0590a512b02fe00f80c454c07a178cc3964f33c2","sha512":"27115b90735d395e4ee2af3221f5f15e6eba5f512e6bd2f07af5c5ba295238955dbc1caddd94531fafe10efda544ffcfda25b39ba4711c2f3b03e2ca77a3e4a5","ssdeep":"384:yulblHE3XJNUEIVKXCUFB66QaAdI5O7AXVTSIb:yulblk3XYABjfmm8Alr","tlshash":"1d42bf86f524e429ed002db07e2ca29d1646aa8875dab0ed31372e9fe1ab0117459cb1","first_seen":"2025-04-26T12:39:08.73898Z","last_seen":"2026-09-25T08:10:34.388815Z","times_seen":655,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kanit:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.016Z","timestamp":1790323670016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Kanit:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 08:07:50 GMT\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7549,"size_decoded":1317,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ebbeccf6fde70f57d288e82182db3fb5","sha1":"792e0f9d07bdb82231ff444b67925260ed4b2603","sha256":"187ff30444e6278f11c4e30d65d2eebd34db595b911c0187445e821feea3d55c","sha512":"8d75ef99b65031fda939742444f819badc49e44f94c3b800efb15a87e86276bdd676b286b89f4eb1544b2cf83ecbb9942c48e27cfb3597df776b0845f42c2496","ssdeep":"96:CO1auNoO1aXjO1acJc+u0O1aaNTOEarNoOEamOEa9HJc+u0OEaINTOXa/NoOXaIA:oKO5o1jxnxRIq1A8Y0Pis5M+ycdKunhI","tlshash":"44f1fd945427d540eb972cc223cf7e3a9e5e61207851ea7a6ffe08c8acabd311315b0d","first_seen":"2025-09-23T11:29:09.552745Z","last_seen":"2026-09-25T08:10:34.376336Z","times_seen":179,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.034Z","timestamp":1790323670034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.25\r\nx-jsd-version-type: version\r\netag: W/\"1352e-ndvOPXKkWWyAnuLBXbzBkVLycnE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\nage: 20007\r\nx-served-by: cache-fra-etou8220138-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79150,"size_decoded":22072,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48577)","md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-09-25T09:45:38.9525Z","times_seen":6539,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":17,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/script.js?v=1790323625","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.036Z","timestamp":1790323670036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/script.js?v=1790323625 HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 08 Jul 2026 12:40:14 GMT\r\netag: \"4630-65618cf1e3b61-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ioSpqCa3HuBxxcO6yo1LDwpTb32sFecaQGLeA9nWZgbnAKzvN9ENih%2FtoTFoGPtstuuAQ3YyLwa6Yijs0nyIasFaE5ry3AgYWa9OHDUCNE9Zaqf9B4om9of5gk%2FBX7k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4088999bd40b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17968,"size_decoded":4319,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"090937bdb279649a5562f48ca3b584db","sha1":"fa5f1ee6a53686fe5b7b655cf6869d9989ef8337","sha256":"e8af941c4a821d191c9b31f43eb001259ad31787a3bd6b6a05eececa2a24987b","sha512":"5e44bd5701fdf867e30dd26f86bfe605ba430a66c21ce44be9375e579745091acee7e3eb09b92c365b7061868fe681e717719a5e2958db870798fb57d83b1555","ssdeep":"384:LDx3oKAALInhcK1WKSoE27Cn728H7tx7tJHjXIM9lRQ:LDx3oKAALInhcK1WKSoE27Cn72Q7tx7o","tlshash":"fa820f0a918b41654967e42a0d3b7d013524a00b3e18eddbba5d92e12fec61dd3b7fce","first_seen":"2026-07-19T10:43:07.265538Z","last_seen":"2026-09-25T08:10:34.377046Z","times_seen":9,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKZ-Go6G5tXcraVGwA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.577Z","timestamp":1790323670577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:02:35 GMT\r\nexpires: Tue, 21 Sep 2027 16:02:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:50 GMT\r\ncontent-type: font/woff2\r\nage: 317115\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19300,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19300, version 1.0","md5":"b149de90fec0235ecc74597251628035","sha1":"a59ae1d58d86daa8759832a3475be3c1c26960e1","sha256":"1e856b3a04f93a23ec758ad37750f4dcfbde02334fd30358d02d5d4db3052bf2","sha512":"108c4270a63d0b99409a1102272e0c3a79200cf79663d9a6bfa999d9a978ee7233c06e89adcb5937c869e81ee70bc4e71106e8c644c9fd9303081dbe052a7dee","ssdeep":"384:5wjcwLP1szEliwu0gcAHKnawvrKNDggVRrw5x0jsE93nT9um:5wj7SKu0KK/v+FNrwDcTJnTr","tlshash":"a982dfac152fdd52fb37423dc5cd4ea4df8286f5e564e49008ab637f298201a3ba2173","first_seen":"2025-04-24T11:01:06.876956Z","last_seen":"2026-09-25T08:10:34.388166Z","times_seen":5942,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_Lo1.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.598Z","timestamp":1790323670598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_Lo1.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:48 GMT\r\netag: \"2098-6556af2d0c08e\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUJYlolUf8JUH9STHZtEOA4jiJZDnJOEx2pQZCAU3pUevzs2eH29C%2FnwsaDOODrl5mvxobyPwnCW%2FixjMkFQL%2BM176KVwRSp1VkSrV9ZPIYy8%2FQv31QEJJx94RX78BIn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e2eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8344,"size_decoded":9062,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"671bf86dc8a04f497b65db1ee2e0317e","sha1":"a22b200b25defbdf50230e3461bb7101ee4f43f4","sha256":"349073092dd3e919635806988d6dfad830335eea79870b873471162f83ccee7a","sha512":"38ed3f198d98d40dae14e7440cb725c2d3727066ee510059873232ec3addccc18bea08016b62a40a4742f3bece80a396079e3d6741ce202d50c279b209360df6","ssdeep":"192:yjoAoRvGqW0s9+HkBxo81FS7sBt3gMAosGpCE:yjoAoRvGj0UzHSWtSorCE","tlshash":"d802bfe4a24630f45961f9ad4de286312c8b73ae01adf97f5acc040b64cbe118dbed74","first_seen":"2026-07-19T10:43:07.26922Z","last_seen":"2026-09-25T08:10:34.39067Z","times_seen":5,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_B1.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.599Z","timestamp":1790323670599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_B1.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:47 GMT\r\netag: \"1692-6556af2bb9623\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5VBardrMNUGeDllcnVJX%2BIAnQDzj14uVsL2hJcXlr5lCybGmLlySPNRssH3fhbETRS5SOYeLY680oj0w4Sx9lF0sm7foE5BL0iS%2BrPtbSf8ZG3jW%2FgwSZhawNUwj3rS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e33b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5778,"size_decoded":6494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88ca55e875d424073207cabcba442498","sha1":"9dec1742355d5f0fefb5ce01b356178fd41d8ff6","sha256":"f3722cbf32ed9819da9c67e56f7ad95cd9da9b65cd4417014a16329ebbe4ada2","sha512":"1deaa89192291d6d563affc404724b974afd09df9e863e26752b0aec0ebc749e7b98b14c733adfba1486f4020c991e799d27af5d9e4eeb7a422dedf888742b49","ssdeep":"96:/+UyI43xNtCaNgveb5bBpG4f9bvuLbv7MYF41hDSCNBOZDHDpH3TMmNP1dz2wp5z:WFIsxNtCaNgveb5bG4kLD7t21ZSSEBMo","tlshash":"92c19f7ab344ccd15377289078b62b9bb49917083bbdda1e41087020da22af43817ab6","first_seen":"2026-07-19T10:43:07.329791Z","last_seen":"2026-09-25T08:10:34.377603Z","times_seen":5,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_L1.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.601Z","timestamp":1790323670601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_L1.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:48 GMT\r\netag: \"1654-6556af2c9b3b8\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cfs9AlIY4ZpDrLXbhw7TaduXYOCiR1nvvrW14ghhp13vyjr%2FhsBTYhxIQs2pSCoReElCyu%2Fik%2FNfrPnv%2FB6zfc4SMJQmQv3wJH8tjhmp%2Fm3pKsdqTm4DUs4KCSasNmc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e38b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5716\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5716,"size_decoded":6436,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"814749224bb90fe55b2064e2333f2a51","sha1":"506a29b3426f42fd1df1e5b517a393af80ab9b27","sha256":"9a14b2e39d9d11dfaa8b893c10fbe474e01c8a95e553ed1f55e7b1b7fbc56af0","sha512":"2b4d607e31b320a7961cb0a7d7535e544787d85b5f283d167ab9d3ce5e4b7aba0c6e87eefded9411a7d24aa5579745ffec03314aabc37e5c556c6868c8b0b46d","ssdeep":"96:pLicBIzCDaty8M8DMKn1m1imoaGIzd6YmhRMP/vEi+WSBW:kcBIzaatTDMK1m5kIBlXciiBW","tlshash":"b3c1cfd17c8a8a111447b5bfa04e94fbde4848c3312d7505838bb0f3270da2756b948b","first_seen":"2026-07-19T10:43:07.280963Z","last_seen":"2026-09-25T08:10:34.391859Z","times_seen":5,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_E0B899E0B982E0B8A2E0B89AE0B8B2E0B8A2.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.602Z","timestamp":1790323670602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_E0B899E0B982E0B8A2E0B89AE0B8B2E0B8A2.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:47 GMT\r\netag: \"23b8-6556af2b4894d\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CchMb92pnFTyWRyZVdhBvdWqZqZpRzlkuv652wB6Upz0Nwjbd%2FcQzGU4IQqzy8JVpI8MgTHEBHYp%2B4d32RZqB8qaZHpyrtJqTZX96dll99zSjTNuH5bd9KIth%2FCY04TQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e39b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9144,"size_decoded":9860,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c59280f45c5a153906a5f812f94c997","sha1":"f7d9d54c1eb41b45ffa1a1432dba0379b0167549","sha256":"759df479202895322bcbfa2e325a1f2d9b75cf0bed0659ad57bc4af86280c978","sha512":"ed349760c2a3f21c6071d6d03b4245219a9df7b4cf10ef3e1637cdd9e09d16016c8199bbab98f5e727d85f45e14999d48dd2d65523da056f6a6584f93a940bd1","ssdeep":"192:UvumnkTWC9Qo5yR7c7oedbH/2YXk6/uH5Tv4T3vgK3468wVU1Y+6bh:Udkb9iiEqz2YXkmqe3vH3sF1xUh","tlshash":"bb12cf26d1ddcbe0481ba53bd29d9f970d4e5aacb862d1016190aab3078d074b1bcb4a","first_seen":"2026-07-19T10:43:07.319117Z","last_seen":"2026-09-25T08:10:34.379273Z","times_seen":5,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.010Z","timestamp":1790323670010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\nage: 1194357\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":33982,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-25T10:32:51.239642Z","times_seen":27833,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":5,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/demo-default.css?v=1790323625","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.013Z","timestamp":1790323670013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/demo-default.css?v=1790323625 HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 29 Jun 2026 20:47:29 GMT\r\netag: \"47d-6556a9117831a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLdxcLCbmwG%2FdcCpz%2FrvOfbqzkJNrzu7MKDo2nBSH9W0pfUIqR8TOqYwn8y%2BCc97gMLnGXW2Wv1x5BSyI4nqQKVpvuv%2BMkM%2FXZvdWqVBo3%2F34ETq8hMSPUDY%2Bl%2F5aU9x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a40889999d36b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":1329,"mime_type":"text/css","magic":"ASCII text","md5":"c50e342b5d5368bd0c37784114a28492","sha1":"f32f15f15612cf1cf735abf68eace1becfce5e2a","sha256":"3a6aa6a8eb47d14ca9cf4a084345651fc22f84a6aa4a71dc6fb341513d5e6658","sha512":"c7057fbc4d19976cd0f2c3f367fab7a2d2de52f3d7540df531aadb1d3257d2e6d7a05c3caa10406382ba30f5912b984b3b3749da40af410b79a0f72924226942","ssdeep":"","tlshash":"e121cba5ae530640a412c1ac27f69b8d172980476e1ac8ba7fd17640df8f3eca0903c6","first_seen":"2025-07-01T04:43:55.735659Z","last_seen":"2026-09-25T08:10:34.394283Z","times_seen":111,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4uPhWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.580Z","timestamp":1790323670580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4uPhWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19276\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:48 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:40:10 GMT\r\ncontent-type: font/woff2\r\nage: 317042\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19276,"size_decoded":20089,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19276, version 1.0","md5":"31da10f2e745d03f329cfc87d45d6c3a","sha1":"49d517f3f800e04eb6dfd7948f808947343ac057","sha256":"a44817a3dcd26f5c659cd92c241f7c9e96414a74c0de249407064364573cd6b5","sha512":"ab7a86d73da8bf083eca72c1c2bd1ded7661339aa64b692194244bddfbaaa6720b24535005ba8a43d1cd21391916854fd85921763baa423b1128bb9cf3ec22cb","ssdeep":"384:pkLL43v8zfymKhBeCuoBwkA5uldAr2mQGEWweZvhcg2PdH/U6:OLU3v8zfyjhBIaldAHrczFH/U6","tlshash":"8282e01eeb1fc5a8fd0083ebca07839c77765810d1b27d976daf80d4ea8d1e5122118b","first_seen":"2025-05-04T15:41:45.605838Z","last_seen":"2026-09-25T08:10:34.385236Z","times_seen":3579,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_sitemap.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.603Z","timestamp":1790323670603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_sitemap.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:50 GMT\r\netag: \"172a-6556af2e5eaf9\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZkFdyEor3DAsAy%2FwMK8eJAqB5pHGhyvgLsgzfUDmBhmBW89qvOSXZSeOqSgLjhkiosGRDiq8dHp2mGMq0kcTNHqhGCQtBIGsIt2mn3SDoPAutax%2FZTbW4FlDO%2F1A%2Bwf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e3ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5930\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5930,"size_decoded":6648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f99e1843f7c42cb18d0e53456e1157f9","sha1":"3a4f34a3c79a8698f4ac3f512bd64b5d50683451","sha256":"b82ec1f8ae41a30912a72a7dd647d0b1b5d81044bffcd349001cc6e125bbbd2e","sha512":"b3a77ca9279d9ce2d73669df1759deb018150ed32cc54d94252782ca09606d1b69c39a35fdf39a311d8decc36d711cef4f14f574706011a59bb8915b012b857e","ssdeep":"96:Ot6pH6W0YHB4JF2ltETlCgC296lVm1x1JJxd6KHtI2NC/VfXgNixd:OcpHLZhEF2sTH9CVmxPx8KDUVfXgK","tlshash":"5bc18db0528d154279db346f56fa3a7e0945c0a62aa090d1e019facc8cf7f4b3c2d212","first_seen":"2026-07-19T10:43:07.256999Z","last_seen":"2026-09-25T08:10:34.392623Z","times_seen":5,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/c2b32a3b2c317607f5415599dae9cb71.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.604Z","timestamp":1790323670604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/c2b32a3b2c317607f5415599dae9cb71.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 19 Jul 2026 14:33:57 GMT\r\netag: \"6854c-656f7ae17a97b\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0UU25nF%2FUrg6%2FhIszkLRohq106u%2BX7Imv6iAx1dzK71fiGowF9YICuy%2FFDop7c3QNFaVwS%2BZdCS1YY5V95gCWwUVbTM8s14wB%2FzhIvfk9G1EDabrj5q3DfCld%2FUwTJT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e3bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 427340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427340,"size_decoded":428067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1768x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df48aedbe3a64c7a78cc6a529806809a","sha1":"95b1a025e7050db8e2bbeb789cad8a482e2b924c","sha256":"5557c8c8001f95c3223ea5cb4b954639791d37f974e5d934823648104c6bfeb9","sha512":"ac47ef1f1e83b05e82bde94f19d946fb181b3d589117a7704d21b08743ea0882d40e7570dbc449ddfc9c01ad8c85a4bebc8e40530bbae52c76da732ddb2597f0","ssdeep":"12288:PwL02vmTMk06w1/smzel2LyjFEfKXM5wZc4+JUf:Pw1TkbgVel2Ly5PM5Q1","tlshash":"749423b04e745a624078f03c5941c97fee6c1b8137876a8aa708faf376773c956a8d70","first_seen":"2026-09-25T08:08:27.089957Z","last_seen":"2026-09-25T08:10:34.396351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":745,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/css/style.css?v=1790323625","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.018Z","timestamp":1790323670018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/css/style.css?v=1790323625 HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 29 Jun 2026 21:14:10 GMT\r\netag: \"203c-6556af0822c3f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sT0HqGIjAf15pXdexbwlnUkpNQmNTF3%2FwbAfluErcp4kB9V57tr%2FWVhPJ0WNO%2B1IgP2ciI9JNcFHL9un79hcJJIIdtfZjHgkAvKvSTsyUgE2XMbpW8iixA1n4YL8P7bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a40889999d39b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2587\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8252,"size_decoded":3356,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"ebd49ba9e857a03a02a4d90f6b840509","sha1":"ca803dd78e0283e2001295e4ec514f3a18c0566e","sha256":"0590241d4843cf9897456817e03943d3d294099dbc38ab673e5c5babe0c4f8a8","sha512":"0449bb7e2fff65bea9605d0ea6020371adc30bcdb7682208c5024141bdf523e3e68f71f7812bf9e7b9d957d5223c16b1d2647bb1b84580097eab1b8c4a792641","ssdeep":"192:QO2AnS2tqTP+acaMQ9GiVACDPbtohGtauHr1q+1N:QZHjjVV/Pbtok4e","tlshash":"ec029731be2485546152c7663783e7bfe32ca152d504a63cafd62c40ead83fc542ef6a","first_seen":"2026-07-19T10:43:07.286499Z","last_seen":"2026-09-25T08:10:34.394771Z","times_seen":5,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.033Z","timestamp":1790323670033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\nage: 1390201\r\nx-served-by: cache-lga13622-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 59086\r\nx-timer: S1790323670.082733,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86927,"size_decoded":30877,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-25T11:16:50.170304Z","times_seen":145762,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":15,"receive":4,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5mOBWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.568Z","timestamp":1790323670568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5mOBWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:53 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:39:52 GMT\r\ncontent-type: font/woff2\r\nage: 317037\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19236,"size_decoded":20049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19236, version 1.0","md5":"12c6e4c44681180d8bcfd68b7b7b1258","sha1":"7f16e28ecf3a9e4d8454fb1010b60af5ba835582","sha256":"c6c4695e70f2b11892dfaec4d4ab44065ed3a847f4d531cfc1340d2e65a738c9","sha512":"2d314ef767721d9d56ce01b016803b02912eb0b5c0c87b0da5dd15a8de431b6b69abfe04cd71fa57881fd10e300f8ddc96ee82292d54fd19b9161361ec96641a","ssdeep":"384:mMLVaCCwmhi5dxGVfDxuaYdaN3Y4pheX9cWjpmHSEG:9VaCYhibkV7xrOaNrbWjQS7","tlshash":"f582e0a05e8b67c9e827dde31228ccda374a08e78eb6c1c06fd5651269784351ec3b0f","first_seen":"2025-04-28T13:50:35.994991Z","last_seen":"2026-09-25T08:10:34.378698Z","times_seen":4685,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":20,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5mOBWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.570Z","timestamp":1790323670570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5mOBWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:27:01 GMT\r\nexpires: Tue, 21 Sep 2027 16:27:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:39:48 GMT\r\ncontent-type: font/woff2\r\nage: 315649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13288,"size_decoded":14101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13288, version 1.0","md5":"732b9a7629303748a3254623ddc19fa7","sha1":"417947525f553bfd3b352ede4217e6a67a8fc03d","sha256":"cce9152dbafcad068207294cbfcc74140e1b18c6c90d30af4a41630d5e73d191","sha512":"06ddb08b4615581119cd1418eb62cb22685215a3db4af8567d9e1f92d7516ebb9a93861ce7f69154cefe037853495c38c527459fb2e48aca3f1e82e468f52c26","ssdeep":"384:KZsQpKR9Pm5/K0+Evc8bQb+fSzEF+pHh4Ewmlyd+/w:K3o0+Evcrb+aQF+1rlSh","tlshash":"3952bf0987b83251cf47c63e683f3a826c563a6364b6352896dcbcfb83f0481165b4a1","first_seen":"2025-05-10T17:16:09.248418Z","last_seen":"2026-09-25T08:10:34.387574Z","times_seen":884,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/2824365bb41e12ea61fd19f7a636df5e.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.593Z","timestamp":1790323670593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/2824365bb41e12ea61fd19f7a636df5e.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 19 Jul 2026 14:45:16 GMT\r\netag: \"74456-656f7d68bdfd7\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YolPs9d9hVLMoCSkOKD0owCq7ZbgCwmx8fLn%2BP%2FEnh4YdYQoSwREVb3DMnzwyqzFomiApuyBJchoNpxmnqMNzeZBZ%2BKlMJUE8aH6So%2BG%2F2FBcQnXTGr9bpSGT1%2Bg3vlx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d3e28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 476246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476246,"size_decoded":476971,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1983x793, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e5f580d9e8ca3dbe0cb4531679b2cac7","sha1":"1b08a36b7f996b025164825621f5f085cb97cc93","sha256":"f79dbbee7f4b2d2cd3e7b17cf84529f8e900649d209a62600a45ac4863306e19","sha512":"1a1036d4d3d1bf2516ca15e937febe445a4e3fd7eb012e3f7374bdf308265211ef2b53e767cdcd09741e8b115283055bda0ada8eafadafacaf2b04fe7729bd33","ssdeep":"12288:IcVHJpIEDDUGlREiSopKprtqT+4L4LvcM:dLpvD1lgo4t8S4LeT","tlshash":"6ba4236a282390a11b4a76f8e868f4ce339e1c960d8672ec5c95adbc63370513c47ded","first_seen":"2026-09-25T08:08:27.094442Z","last_seen":"2026-09-25T08:10:34.381224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":936,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/659e266f94e7db91d4c5f5d3244503ef.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.606Z","timestamp":1790323670606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/659e266f94e7db91d4c5f5d3244503ef.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 19 Jul 2026 14:34:58 GMT\r\netag: \"65f28-656f7b1b5b0e6\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obnIHTilX5BqSG%2BTX7KmTQZhU2q3g5k6WbcV5jlJR4maE85WlDtrEh%2BjEkq%2B8Qkp8iJwRvCixXuhwFwQuRckS1km29ORTXIEYcFx0bLMurN38jXpEMnaAoLn6C%2BaX504\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d4e3cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 417576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417576,"size_decoded":418297,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1744x902, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b2c07adaf38e406abd382946fb8fd6e","sha1":"8c06c2015062b880aaf4e4ca15e452c47d955324","sha256":"d702b87dff1354424b70f4860ab126ebf1b362917d038dfeea3b5d138da9db23","sha512":"36ac7676066a737221cb71ee36692ffbc7fe25bb7b1974906999df17952c2ad28f0dcfcfa69169f39536ea0300b7fb8eed17f08ad98d91886beed29644ad3fc6","ssdeep":"6144:RuQS1EPY//4yKhPblLtwhD73lBNUi+cJa5esycJhpD6tgN+SYiKqQMtgeEkG/Z:Mj1E+/4BhLtw1t+k78p66+XqQxs4","tlshash":"d99423b7a71238cbc9472196425fb661d3e76a087cef5e1fbc940cd9c224948d7ca50e","first_seen":"2026-09-25T08:08:27.096441Z","last_seen":"2026-09-25T08:10:34.385732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":931,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/d77b680cd0017dd28b32be9f885a69f0.png","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:51.532Z","timestamp":1790323671532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/d77b680cd0017dd28b32be9f885a69f0.png HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 19 Jul 2026 14:46:14 GMT\r\netag: \"74f3-656f7d9fd8e87\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIU6K7E65Qn3B406EHqMwS83KG5px382%2FAzitHzGg3eQXDZgysrOpE0LJLtOTC%2FKAzPafxRQjR0hl%2Fo5iw4DaLMfg4taO3mVYFEv0Sqv%2BW%2F%2BFsGbhoNIpc%2B5PI8RqHly\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a40889a31fdab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29939,"size_decoded":30666,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"fcd0e44b0dd552ca179fbefe59fb099e","sha1":"87098f9b896c340d87080a67a950e79038b58952","sha256":"b45e18737c6d235053564a0ce861dd1c54fdf2cc926d0511a99113ece1eb271a","sha512":"c8f15507b8cbd1e2ca6f1a691878cb4f2e5a93cac26013e214aed83e1274536cd6120488cdaa6a859c322e6605d6b1bb23ecc1b15d405b72fa0614d7c1a82776","ssdeep":"768:WrbJde5HySUiMrbqloaTk97oCvLGQ69rK5tLKiNLZ:WrbPnSU9nqnTU7VTf69W5tbLZ","tlshash":"ecd2e15261bf46ad3d22185dfcbb511d62936716952961ee0e006ffa383fe2420fc5a3","first_seen":"2026-09-25T08:08:27.098154Z","last_seen":"2026-09-25T08:10:34.379805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.008Z","timestamp":1790323670008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 08:07:50 GMT\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39652,"size_decoded":3140,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"46123f07bf6dc86e01a3c88934b0eb20","sha1":"8b2d5805f792e129d9038acfc7ebb23d35ea1a89","sha256":"dc13e618cfae36d5238fece3a2d9ac4f078e6df791413ce208c632bd72f7d7ba","sha512":"eaa8c5950c5a3ff3635a4909faa810a61f0eb1d6ac6dd89f144dedc575dd398fd2fb9153abccb6fa7c414b7b40d1c0ca6c6ce4950e19cb6458e7c09828ea39f4","ssdeep":"384:+QOkTltULv1qY49GnDu6SqY4C3is3X3D35CsAfXosWBZTsmNUUsKVdqso3/5srQV:QFJNGP3HDaZzcC","tlshash":"3103e9b0042b9540ea831dc623cf7e36ee4eb1617050c47aaffd1989edeac26636475d","first_seen":"2025-10-03T04:58:08.335958Z","last_seen":"2026-09-25T08:10:34.383089Z","times_seen":107,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":38,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.038Z","timestamp":1790323670038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 08:07:50 GMT\r\nage: 1318162\r\nx-served-by: cache-fra-eddf8230066-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25254,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-25T11:13:37.827756Z","times_seen":32368,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4uPhWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.581Z","timestamp":1790323670581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4uPhWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:43:28 GMT\r\nexpires: Tue, 21 Sep 2027 16:43:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:40:10 GMT\r\ncontent-type: font/woff2\r\nage: 314662\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13488,"size_decoded":14301,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13488, version 1.0","md5":"7e282092619e83527baf07b5de0a1753","sha1":"fb8d514d7275260715385d88a3d327a128610a74","sha256":"20ee1ffc0cbccfc9e4b7d660d2937f82b75d0eb41354e71e22752495aa51f68a","sha512":"fbdb6d402588ec80a8b32cb41899b3d81c265a5cbb0a4c1d9cc227bac95c917656919f225627720d583ffeb6c49dee4d8abc985bde4824779658955978fe84d0","ssdeep":"192:fGhuoiIthoFe3yjqs+WWI8N0n/efbCbATIyS0714d1iRmoVCUBYF7iQEoKmsXdEL:fzopho0gBWJNEATSFiCUBK7i/oINnbW","tlshash":"7752d044932be8b1ca1b09bfa4e29e1ae7412c2e60fb489554709127d5fcbf4c6533e1","first_seen":"2025-05-04T15:41:45.710779Z","last_seen":"2026-09-25T08:10:34.39818Z","times_seen":674,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/i/2026/07/f01e62505e45f10e8ab851c06e8efa9e.png","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:51.534Z","timestamp":1790323671534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /i/2026/07/f01e62505e45f10e8ab851c06e8efa9e.png HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 19 Jul 2026 14:46:14 GMT\r\netag: \"70e-656f7d9fcbb92\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaxHPTnM%2B5u7fJKrLUqF2%2FyMF9AedP3Kw0nXuPMr3J6STAL9sbJqyfbfONtS85493XMsAxIiwp7B6L7j%2ButwOTpRv%2F7m8%2FybQJ%2BUqNfeStx9y7F9mQxGf2h6lmP%2F%2FV9Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a40889a31fdbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1806\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1806,"size_decoded":2533,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"95f4cc279a13a111459d51ca526dbe14","sha1":"f7a4b36d86c95f3c5bc83e2c27d86af4f610a9f0","sha256":"c1a50e85499b4b06b406b93a3ca2398dab978b714fe9a4bdcceb1662bf4a68df","sha512":"502f2a2c918c0c76b9dc3436a347853a39374132a6083a812cc8582888c2a37f1ee6d7c3ed8f9510877f33ce7bc94b3a1125d2ab17195d1fff9cdd6087d1d728","ssdeep":"","tlshash":"ba31f9f742f299e9d42486716353b051053656f4f47a26ae156260bea39e1c00f5d344","first_seen":"2026-09-25T08:08:27.101757Z","last_seen":"2026-09-25T08:10:34.397018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5KPxWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.572Z","timestamp":1790323670572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:53 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:48 GMT\r\ncontent-type: font/woff2\r\nage: 317037\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19496,"size_decoded":20309,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"201d1d24b464e41d18e57dc58687f055","sha1":"d35fdb2a75da697dc080ced73400fc394f6cf4b8","sha256":"c3c4f89f25c7c8343a8b8ce0a120fe2c419809a1e92cc9313cbb5a36fb10a411","sha512":"8c695fb5dd450e0d4355f898d657d6d5c943c5c049284c9b32c017fc89d82296dd84b93abe8ed5ab8c44a2a480515d37e12b1dc3c8f2532406108d849533e93e","ssdeep":"384:IKA0aP4lPNAX1S8i6ePT1EEgJM3tgs4+fWjg+lva3AXnpj9gx:IRyWJeeJwgsLf0vg0XI","tlshash":"fd92d18fed917bc8f29d04ae94830ffd6877b10bd1a081790ad464419ca87766a6dc47","first_seen":"2025-04-24T11:01:06.88202Z","last_seen":"2026-09-25T08:10:34.384675Z","times_seen":3694,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4-ORWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.578Z","timestamp":1790323670578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4-ORWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon789.ink\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19048\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:53 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:41:05 GMT\r\ncontent-type: font/woff2\r\nage: 317037\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19048,"size_decoded":19861,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19048, version 1.0","md5":"f659d8a8cf768c813fc04d8ea1123a8b","sha1":"5f19fc05a44000a1e82710485b32220020a8290a","sha256":"a29db52c836726b49317c0861d922e195a3d827d07a935701cdfe1f26425f64a","sha512":"4afea3d4b8e151055fe2a47c4aced2300abaae1f39350d6c0cd68140a5ff79888b9d6518f3228e4d98c5d1cf0494c2b1b670e347fddf6e0f6af388bd834f21d5","ssdeep":"384:E+obVK1NX8ka1qoFV71+QBHNvVt7YAR9PpVEg4GYXSNvr4W:EJA1NX8ka17z1NHNvVtFRjH4GYXSNz4W","tlshash":"3182d133da8e4320e681f8a50d17dd87d7b985dcaabc9e08275e828ac6d7426094eb41","first_seen":"2025-04-24T15:54:07.283751Z","last_seen":"2026-09-25T08:10:34.380499Z","times_seen":1841,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":43,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon789.ink/assets/loki/img/Ufabet_Buttun_game_Ca2.webp","fqdn":"amazon789.ink","domain":"amazon789.ink","tld":"ink"},"ip":{"addr":"172.67.168.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amazon789.ink/","date":"2026-09-25T08:07:50.596Z","timestamp":1790323670596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazon789.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 23:18:29 GMT","end":"Tue, 15 Dec 2026 00:15:04 GMT"},"fingerprint":{"sha1":"43:2F:8E:5E:15:66:C9:BC:79:31:F8:2A:DC:1B:1D:45:9A:90:53:79","sha256":"BF:40:A5:30:9C:D3:C4:51:1C:4A:BA:E3:03:67:3A:8D:98:40:88:91:CD:3D:D4:3A:36:7F:CB:B6:B9:7C:F0:02"}}},"request":{"raw":"GET /assets/loki/img/Ufabet_Buttun_game_Ca2.webp HTTP/1.1\r\nHost: amazon789.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon789.ink/\r\nCookie: PHPSESSID=05c9c6c25e8cc45ec1bd23e4e0faacc2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 08:07:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 29 Jun 2026 21:14:48 GMT\r\netag: \"1aaa-6556af2c2a6e1\"\r\naccept-ranges: bytes\r\nx-served-by: amazon789.ink\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v393UtLzg5t%2FHcvbmUz6UZdSltzQezPfO%2B1R0e6Dg5Z0uNCnBeI2h1AaxBcZZFfIcLXHATo4M94Z3CTd4rTd6CUlCBi32gFiKKzRHYh3L3JybUVsaZlgvDgF4ym8GInH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a408899d3e2ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6826\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6826,"size_decoded":7540,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46966e0bda269a7e94ad355a62e81a5c","sha1":"49d8cd8f59ec11998094344d2830715f99319ac1","sha256":"a7c0f10c63f242cf20ab66c3cb6116ddc1538d63f876508875e24637a60f403b","sha512":"0367ccc04f07a02dac73bf8fb4c5d9a7fdb0702c179bda217624b0f7d92d23d40903c8e4884633b95c14ab38418d05c1dabccfed3e38c835866edd3fcccf0fec","ssdeep":"192:JCDxcP0MRL4sVOftOXrRIonjZ6/fpE6LisF:AD2P0YRVkwrRIujY/fpE62w","tlshash":"48e1af13b3604efb8a0425687d3a1b1065813a491d52adbd07a81deb561276ce57d0f7","first_seen":"2026-07-19T10:43:07.267632Z","last_seen":"2026-09-25T08:10:34.382326Z","times_seen":5,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"amazon789.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}