{"report_id":"c933f037-55eb-457d-ac37-66bfc79a77b8","version":0,"status":"done","tags":[],"date":"2026-09-10T19:18:32Z","url":{"schema":"http","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"172.67.129.71","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"title":"– Weź udział w ogólnopolskim badaniu opinii – Zgarnij voucher!","dom":{"size":73781,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (433)","md5":"00ca714a63f5d925eed67f1cca6aa259","sha1":"f93d4e04eb818fc4cbe94b1e68c6888fb450537a","sha256":"73f01eda8ab7c84cd8b20e2a2ea9b0645cf7cf3dc4546dda76cb35d303ea9b62","sha512":"cdfae19a08ed4381cee956ce228a2e1bd613362568153e5a2780e2e431cb1396cde607bb0ced390508619c3cc7d5daf7a0e7dc2f8b708866de4d5e7b839e2143","ssdeep":"768:m9YrbnCS4qG/niKWStuTivz/W+57f4pRrSSDOK1Q0GrnToZr0zlCL:mYHCS4N/iKcAz/WQuwEGgZr0zlCL","tlshash":"df733d2174f5203705a390d57ea66f0b6fe0e607ca1b062836ac0be95fd7de2dc67219","dom_hash":"domhashe889e11eede8cff452cdd9849200fca4","first_seen":"2026-09-10T19:18:39.72678Z","last_seen":"2026-09-10T19:18:39.72678Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"172.67.129.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-15T19:18:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"demaro.site","ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":140,"request_count":28,"received_data":1455491,"sent_data":13557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":4,"received_data":148306,"sent_data":2264,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":11854,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa5c9ca175c25376efc64d39a0e50f3d","sha1":"1dc836db7bb3037e8d3ec2a6bf6f191d47214780","sha256":"84d884c98a099253f793b9401829d17cec4da0637831bc343cda25fb0f03d448","sha512":"fb04994b8b84e23f85904b747e487be00209ff15ce341a9a3213468eea70aecfdaa210bcb789de5c50b5c1f5af4ffa9d2a6c029348e503376072dc0d4270ec00","ssdeep":"","tlshash":"7f01d86b2c83610663fa25be8b1352693321030260819a28ba1e80202f84a862c61f8f","size":768,"data":"","first_seen":"2026-09-10T19:18:39.839519Z","last_seen":"2026-09-10T19:18:39.839519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26e472bc0d0c9274022f59a4d9adbd6d","sha1":"e74779432d184bd78ab3f7d16af35f7709068281","sha256":"4f84957f3afa2562dea2a6724a83c6a6e089778d57dd66750b875760413942bf","sha512":"4b9f00c80c9c75956a5112ebe9cb44f4ba9f14d723bc39fd9c464849b0f93d9d81f16bb668f5cc7e90c3ded869f549d9f687a664665a3ee725ceff9138b6869f","ssdeep":"","tlshash":"1f512a6f35e7243886ef617e6a8b33493631d0132504c991791c5224afa0fa795fbbce","size":2605,"data":"","first_seen":"2026-09-10T19:18:39.84069Z","last_seen":"2026-09-10T19:18:39.84069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fcbf0cedbad044251721e194439f205","sha1":"1d6cebe0397e6330ef483d32338607c10fa2e800","sha256":"f4f6c708d9a5318546e0686d3675f4c9055453f4bf20b384c779751894a69699","sha512":"0e77bc78df7483f0e3cda57af988f912151fca541cf3d0dd8520413346145d9a3e7fda9c475c2184188af9dc6a7ab8fd97f18330eb6c6490fb6bd90c2eafbc9a","ssdeep":"","tlshash":"aee0c26b7b7d203480df737b730b2e46252540032010c8493e2c9e404f64da7946b99a","size":302,"data":"","first_seen":"2026-09-10T19:18:39.842453Z","last_seen":"2026-09-10T19:18:39.842453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/php-email-form/validate.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e52689e17b987b2059ef3a4ae1471e25","sha1":"02c7c1a3766de6ac39a8f2cfdb8ffb47d63d4281","sha256":"c513fe9eddde2b3624793d59b69a8a4b9edebca9b2c584558202dd3d296f3831","sha512":"78c4553374fd8cf473a6cfc52fdccd3f512c4bb45cd4ba248887b99299638403153c93af662398d6a01bb7f950244eabdaf0aa3df4e869b96e1145029344e2e5","ssdeep":"","tlshash":"0d51eb5f166916738a3367f55cc64a80e238503fd98046a67d4cc50d2f384e1aae8fe8","size":2735,"data":"","first_seen":"2025-03-07T19:30:18.750253Z","last_seen":"2026-09-20T06:23:24.525308Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/aos/aos.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa20b6e0418d20fb86b071e670b2b207","sha1":"e38950c1bce65e9f048e305b3567ff90a0c923e3","sha256":"dd1f9acf13b12f189da475e0f23c7c505767859ab620aac636964974093c281d","sha512":"b6734ce8f3cd3957d9e6c18fc3a853842adc5017aab76995124dc4023f2d0adb8c1ea6ee566e7f1ec65a82bafc5b669a144fbaaca201c86c106c49e6a1dad856","ssdeep":"192:mOaHX24ysbeCVXVyILkYmTpOIytlomlBpOIVtlomlrjm5bovo5FglaZW0fNacZgu:mVpyRSVLL28HVjkFglMfNaEg+l","tlshash":"91520adc7286f166475394bb417f610bf2f154a4684d8040e239c5e73eb989aca33eae","size":13800,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-10-15T06:12:37.467003Z","times_seen":11492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/purecounter/purecounter_vanilla.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"306b61cceb925965f85d9b377f1539ad","sha1":"b6c8a987f5cb8b4aa99e2fcc5769baea50228a1c","sha256":"fee31474403c6f8d140b83d8db9d3eb855c48aea51a41bf273d1f61367c730fb","sha512":"b544e22b3be9ee777b78cf4f365077a5ea313a7a337223e444afc7acc8560ef801e5d40d41d9187f4dbde13242890a09bd6f7b79323508d8f0323bb82832ab2e","ssdeep":"96:DRHnh640rGYBDCp3oPgonzvMkdJz7zxCrO6U006NEukUHCcx/puPsO5Owor7f:DRHMfFxCp4PgcMIxC46iPUiy/puPsO01","tlshash":"80b195897283f0b6c77750a600ef520bf678a561141ec550c26ae8d43dba6bbc353f6a","size":5417,"data":"","first_seen":"2023-03-07T18:11:38Z","last_seen":"2026-10-14T17:21:35.040744Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/glightbox/js/glightbox.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ed34b339caa08ee6eb80ef401e8ab3c","sha1":"7261357fbd7dac8c6fd05dba4679d1eec0b30702","sha256":"c67c59cdf980793b0216c9de9c6ebf688418838822af1e50b09439e3aa289ff3","sha512":"5cbe784a371e5d91736e5ce236768515a5e0833a82b99ac54b896858fa6f3c9e8a83491cd87c8bf3df9c3de1f418cab4b0a2f649e83352603c2f1f5ad2cb76a3","ssdeep":"1536:oHBlAhwxFFKdlY8fVoZovhq3+XTfk2CJpxiN2Xy3AIPGwB8qcBqlDV0EU2EY2o+R:+IG1pA0f11","tlshash":"ec43f9057291387644de616aa03b830b72b7260e2805d09cb4bddcdb29f8d9e31a7ff5","size":56343,"data":"","first_seen":"2025-01-31T05:50:22.32015Z","last_seen":"2026-10-15T04:22:25.697417Z","times_seen":2940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/js/main.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e88c3ccdd77122934faafbea50eefcfb","sha1":"8fe3e2d4b6b65e30eb772a9b5b1056c9c29183bc","sha256":"fb36bd2c6515d4df1a6a8a766e7a2b470baf77a94a1f02f760be7920a6624b5c","sha512":"c53647a9ca7ac243078865e08ef9a53cb92529c0cd0867fb024401b198503c802c3d335a165e3f7594d818bce8693aa8b1ab5790e4de26a389de5b3a89b5dcc3","ssdeep":"96:u6kIiOYE1CqEJaVNEo3ruF1sDPdjLhEr9/umP5EEq:u6kIZCqEJa/EGqFGDPdjLhEr9/umhEEq","tlshash":"62a124167af10c7340f7a9eee7cb67c0b615119f508688133e9c8b489f416b947b2be9","size":4713,"data":"","first_seen":"2025-06-24T10:00:53.578921Z","last_seen":"2026-09-10T19:18:39.833849Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T05:33:59.803431Z","times_seen":455157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43629cbd1e4634150e99b74d2c35a725","sha1":"c7827462c3ce7eacd5d4fbc975f6fd572b047778","sha256":"cb789b7cec81aa580177e1b3c0561011539974d243d3a1de0d78a1a278015cab","sha512":"4ea578e2f27a56cb4230cf24b28c643b2ff1c4ef7bb0a2544b138280b772b30e10470e244d52f03a6c65cd19eeb5fe8db8d32db78f1430910cc9967b84c31e6d","ssdeep":"1536:iSwyiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcGRO4qchsE66:hwos+SSO5q4tZwcGw4qz6","tlshash":"c983b5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80743,"data":"","first_seen":"2025-05-07T23:00:00.35056Z","last_seen":"2026-10-15T02:56:20.882521Z","times_seen":1452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/swiper/swiper-bundle.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"750b7e1509868702d0abedc196e7884c","sha1":"75754999460b5d7130bc6d77248b9e15cfdfad6b","sha256":"517e6bfba591ce6dd983f04b92e80ccb1d29f50e769f47d1aa07bf659ab31419","sha512":"69979f0040ad60287b59cce7e671747e179f399596acc0df48f937211a0ca8aadb59aa4b5a7981c9f6b96c67eae023821b708d885110f6e4d02a625186124187","ssdeep":"1536:EKJqGfGmh0+w8NkvJuBEFUjF3j7Mt0BlxvHeYkEl+VANuRWaGCjmyiBnmYlV/TIz:RJB7dNcZYkEAGHBn7/TI/ichDpi7U/","tlshash":"e4e3e889a221b67646e7169b93e4c211b3b50540b80ac4f470fd4c9f597ec9813feefa","size":154008,"data":"","first_seen":"2025-03-20T00:24:15.614367Z","last_seen":"2026-10-14T14:00:40.21013Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/imagesloaded/imagesloaded.pkgd.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"919bcd36ba45f4ae408e47ad200e0cc9","sha1":"de12adeba034b0e200f9a13623852f1e2cdadb4a","sha256":"86dacb15f649eafe6e74e1bede434b20d20a87682fa0aab01211d87d34cc2027","sha512":"91fb370edf6ef5870e888b78acd70f53377234d3bdb151903e266cb9bef2c20ea5456e4ab8ad66d78e489ab1477b72cc5971e77682a8d984575b2f2b9ce7122a","ssdeep":"96:bwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:bwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"89b1218db7737563125aa0b2b31b430ab3f6509ea128419d765cecf39cb490a1973fb0","size":5485,"data":"","first_seen":"2023-03-07T14:53:01Z","last_seen":"2026-10-15T04:36:11.878403Z","times_seen":5417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/isotope-layout/isotope.pkgd.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-10-15T05:34:06.757181Z","times_seen":27760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"demaro.site/assets/vendor/aos/aos.css","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.534Z","timestamp":1789067880534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/aos/aos.css HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Sep 2024 10:05:54 GMT\r\netag: W/\"66e2bd02-705d\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pW%2BzZE0o7u9DDTYSk%2F5nnSzcC1Jz6qA%2BURNltycvI9mLYAki5l5bK8BsFhV9IpknEy%2F%2BshnCQyYi6mJftChWLJL7znEA84RmPDknn0owEiVFEVrroHnAEBQabrs04A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad695c7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28765,"size_decoded":2472,"mime_type":"text/css","magic":"ASCII text, with very long lines (28765), with no line terminators","md5":"6bb5545318038a2cfb38a19581c581f9","sha1":"9a26a349d21a4b871f45dfd124a43fada4f94b98","sha256":"8695f5fc64d65593f9763a5b28d14bc34e3cf802317e1ffad2125a7c8fedfafe","sha512":"8681a53beef57d21ba9604bad08e1b2afb05541f9b027ad5143625c125e8c8d2e9a43728ba9c0907b29b5aaffade20022a7de07202bd8cc5ddf93f980de56b19","ssdeep":"768:CdJLh9C9ZnOrdFGJtrSb59qVZx1GrdF2JlbiLRdtlVt4lxhKdvJg11NeNP9QNB5h:CdJLh9C9ZnOrdFGJtrSb59qVZvGrdF2H","tlshash":"a4d2c29a794cd100bf431b4762df2a1859347588e530098abe3f35ca1cd2de6b973fa9","first_seen":"2023-04-05T22:57:22Z","last_seen":"2026-10-15T05:10:48.48588Z","times_seen":14705,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/swiper/swiper-bundle.min.css","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.535Z","timestamp":1789067880535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/swiper/swiper-bundle.min.css HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 04 Apr 2025 13:08:38 GMT\r\netag: W/\"67efd9d6-4816\"\r\nx-ray: wnp68729:0.001/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfEFSm%2FO8ULKltFdRmbp0mvXcXFCGSdUAL4kwRudg6qZBr7RETsVXZwjRH94FhOeAXWRJnajzneEi22UDST8WnK0bt22Z%2FxXuZAqdpFmOqCxyHJGvLAlnqcUk%2FzsJg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad695e7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18454,"size_decoded":5229,"mime_type":"text/css","magic":"ASCII text, with very long lines (18199)","md5":"2a1dc9ac6fde65e0796bef83a8e57dfd","sha1":"4210c1743d816399f7c0b9f8365fabbb2e991009","sha256":"ef7ee2f59686b2f281d608185071fe95f5fd27f252842e628113877e15b7d24a","sha512":"32636b56a981529a69babea0ae41e72be876ddf9aba46cadff080fda7ceba335e6d8b6640864c3b4f384eb01ef78465f5bc427471238c5ed1f85f39b7b3a1474","ssdeep":"192:PMmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:PNUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"bd8256a45350182753274f374bb1cbb9d97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-03-20T00:24:15.60194Z","last_seen":"2026-10-14T15:33:23.659555Z","times_seen":1504,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/css/main.css","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.538Z","timestamp":1789067880538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Jun 2025 12:46:02 GMT\r\netag: W/\"6854068a-30218\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLKJLvz9Zz7OPRh%2FYlkESlA%2FE518s79khZRo5V%2B1IgauXvAhYa%2BFpauBp6Uo1SGwYSbjEWOmNmXI%2F3rbJWUY3t%2B6SvLxniS775qwgApBpBiB3dvaelmjViKlqKpPvw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad69607b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197144,"size_decoded":22654,"mime_type":"text/css","magic":"ASCII text","md5":"c979e5529777888aabe173cb2b7f56be","sha1":"9c77f994f68ec0624905eef9ac91e98baa084334","sha256":"3227f6e35fecb350de31f945030280cf07a9c9f615e74fd5fd2bada1ea0d213a","sha512":"4849a7f2fd82170be80d653c96dca860412bfa8b542da5e6b31103db9d49783e6338fc0a19efab90d46eb803d407dc223d072150b34d2059b62497705b67282a","ssdeep":"6144:j5QtfLbX2v5s8KA9BzH48Kh9w8PBw5XIhq2fQ95u0:dAfLbX2v5s8KA9BzHoBw5XIhq2fQ95u0","tlshash":"1f146694efa00525245bd56c65d3e789f37ce880c80edabcb7e6140c9ec87e9126eb4d","first_seen":"2025-06-24T10:00:53.595429Z","last_seen":"2026-09-10T19:18:39.738551Z","times_seen":4,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/purecounter/purecounter_vanilla.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.548Z","timestamp":1789067880548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/purecounter/purecounter_vanilla.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Sep 2024 10:05:54 GMT\r\netag: W/\"66e2bd02-1529\"\r\nx-ray: wnp68729:0.010/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03pHaGENCh%2Ft0%2BO9w21hIimo%2BAHnd2mMfgrw3ij4GtAQ7tctn8hpwGBpuBV7iF2pG3NACOrC8S3asd2RPqjT%2BFM%2FOyuL7hCOX1kDlLscXLui4iD%2F%2F7cuZUdepaAxGw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79667b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5417,"size_decoded":2981,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5156), with CRLF line terminators","md5":"306b61cceb925965f85d9b377f1539ad","sha1":"b6c8a987f5cb8b4aa99e2fcc5769baea50228a1c","sha256":"fee31474403c6f8d140b83d8db9d3eb855c48aea51a41bf273d1f61367c730fb","sha512":"b544e22b3be9ee777b78cf4f365077a5ea313a7a337223e444afc7acc8560ef801e5d40d41d9187f4dbde13242890a09bd6f7b79323508d8f0323bb82832ab2e","ssdeep":"96:DRHnh640rGYBDCp3oPgonzvMkdJz7zxCrO6U006NEukUHCcx/puPsO5Owor7f:DRHMfFxCp4PgcMIxC46iPUiy/puPsO01","tlshash":"80b195897283f0b6c77750a600ef520bf678a561141ec550c26ae8d43dba6bbc353f6a","first_seen":"2023-03-07T18:11:38Z","last_seen":"2026-10-14T17:21:35.040744Z","times_seen":1556,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.541Z","timestamp":1789067880541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 12 Sep 2026 19:18:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qdlr1qYPrXXqg140%2BWakoxulwEB52QPTE1l3GgOXl%2FEqSkXElxBTvWZt8yDLnMGxLxk4mt1cycm%2BlB4TZqUBXlstHFmS4J5yivIKZNEJbC%2B9Ya6KU5piY6iMW3%2Bfyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\nserver: cloudflare\r\ncf-ray: a390c6ad79617b33-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T05:33:59.803431Z","times_seen":455157,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/swiper/swiper-bundle.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.547Z","timestamp":1789067880547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/swiper/swiper-bundle.min.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Apr 2025 13:08:38 GMT\r\netag: W/\"67efd9d6-25998\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2C52nm9B5dmEMOXfMkHAKLUHYEtUGw%2BnE4tXCusNVhqgmthE%2FysF27MZtKMDFGjq5bfiDlraEMmGYJY0uGqtVx8%2BCBBjvwUJ88Igm2r8E%2F0x11gdDc3xTeY%2Fm4tsg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79657b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154008,"size_decoded":41580,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"750b7e1509868702d0abedc196e7884c","sha1":"75754999460b5d7130bc6d77248b9e15cfdfad6b","sha256":"517e6bfba591ce6dd983f04b92e80ccb1d29f50e769f47d1aa07bf659ab31419","sha512":"69979f0040ad60287b59cce7e671747e179f399596acc0df48f937211a0ca8aadb59aa4b5a7981c9f6b96c67eae023821b708d885110f6e4d02a625186124187","ssdeep":"1536:EKJqGfGmh0+w8NkvJuBEFUjF3j7Mt0BlxvHeYkEl+VANuRWaGCjmyiBnmYlV/TIz:RJB7dNcZYkEAGHBn7/TI/ichDpi7U/","tlshash":"e4e3e889a221b67646e7169b93e4c211b3b50540b80ac4f470fd4c9f597ec9813feefa","first_seen":"2025-03-20T00:24:15.614367Z","last_seen":"2026-10-14T14:00:40.21013Z","times_seen":1767,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/glightbox/js/glightbox.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.552Z","timestamp":1789067880552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/glightbox/js/glightbox.min.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 09:41:58 GMT\r\netag: W/\"67a726e6-dc17\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnJCz%2BzVXw2mSdF%2FdjvLpMKuTh2zEa44lIeDDiWg7Ck4RMq%2B3KtNBPvKEkbh1%2F8o9mXV5kBH0xtVQbCvKfcZ9ZatdBs04k0PQjraPyjwltkotmjOnzRua0x6A7krdQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad89697b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56343,"size_decoded":15659,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56343), with no line terminators","md5":"5ed34b339caa08ee6eb80ef401e8ab3c","sha1":"7261357fbd7dac8c6fd05dba4679d1eec0b30702","sha256":"c67c59cdf980793b0216c9de9c6ebf688418838822af1e50b09439e3aa289ff3","sha512":"5cbe784a371e5d91736e5ce236768515a5e0833a82b99ac54b896858fa6f3c9e8a83491cd87c8bf3df9c3de1f418cab4b0a2f649e83352603c2f1f5ad2cb76a3","ssdeep":"1536:oHBlAhwxFFKdlY8fVoZovhq3+XTfk2CJpxiN2Xy3AIPGwB8qcBqlDV0EU2EY2o+R:+IG1pA0f11","tlshash":"ec43f9057291387644de616aa03b830b72b7260e2805d09cb4bddcdb29f8d9e31a7ff5","first_seen":"2025-01-31T05:50:22.32015Z","last_seen":"2026-10-15T04:22:25.697417Z","times_seen":2940,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.910Z","timestamp":1789067880910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://demaro.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 12:44:16 GMT\r\nexpires: Sat, 04 Sep 2027 12:44:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 542024\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-10-15T05:27:04.354491Z","times_seen":17929,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":36,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/bootstrap-icons/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.911Z","timestamp":1789067880911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/bootstrap-icons/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/assets/vendor/bootstrap-icons/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:01 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 10 May 2025 09:35:50 GMT\r\netag: \"681f1df6-20b9c\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dir8TJXtyXp3xisU4hcJHANZW4hnhf0vCuJKDZZJbb3qJUr1vp8J7VFvpysVmPrsfWD4CY8PuQpSjKWw1Ursi%2FeZpJ3Xo5IHIEYe5LGLw0%2BNHRBc2EjMwHBeiaK2PQ%3D%3D\"}]}\r\ncf-ray: a390c6afc9a37b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134044,"size_decoded":134773,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 134044, version 1.0","md5":"84a4d15b9e4459b6229a7f1dccc6609c","sha1":"b441fcff939e24fa0906a37b7788788b9fddbb68","sha256":"6c75710364a1ca5604267716f6d28997b26319fdb078cf11e0b42ab66ff2ea61","sha512":"d767814d144b311254de5d248d4a1cd2777209016687c11b3a7791642d90ff267c11d0001fb30435e3767959a2a00d4076e1bc6fad3c7a58cfdb00e5c77c44ce","ssdeep":"3072:tDHos22Zs2P3qithtQxgI+oZzvHB2haro8yYMBX:FHo8s2P3qi1Q+K1hLrxmX","tlshash":"19d3127e338ead54c8b4d32963588c7522ef82c2962bb2235f71523386f94fce485517","first_seen":"2025-05-15T10:27:38.85456Z","last_seen":"2026-10-15T05:36:42.464467Z","times_seen":7163,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/bootstrap-icons/bootstrap-icons.css","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.532Z","timestamp":1789067880532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/bootstrap-icons/bootstrap-icons.css HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 10 May 2025 09:35:50 GMT\r\netag: W/\"681f1df6-184e4\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JfBqahZerLo10vNaRYTGXJ79aa9RRIGCOJYed%2FPdIrYaxTRzzaYnc0mUTTTBBhS1H1fcJzOglRu3U0nsTkd7y4rAMd9IbTYus6DLl%2B%2BvKkCVssrxeYvZyc1FThV9g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad695a7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99556,"size_decoded":13689,"mime_type":"text/css","magic":"ASCII text","md5":"1f041c852155e417017372c978871d14","sha1":"a6d1dba136d1e607078db3003070eab34b51ec50","sha256":"004322721c8557331759bc6ddaacbb689b0f0715d688aec82bd056d2d5b5cc3b","sha512":"bd61eca743ee4f1c1130bb464e76d2ecf0cdb48ef21669a216adb886372aa6ea7f28aee2c7159d5f04667ab1bd82eee979a491215c6915c7c1495ac6cd6705e3","ssdeep":"768:vqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMZ:mOocm4FJwZ5ijINRDlIiw","tlshash":"6aa3efba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2025-05-11T00:31:32.601303Z","last_seen":"2026-10-15T04:15:42.427828Z","times_seen":2195,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/aos/aos.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.546Z","timestamp":1789067880546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/aos/aos.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Sep 2024 10:05:54 GMT\r\netag: W/\"66e2bd02-35e8\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1I%2F954oPQE6hBzw8aShPxW9NhuqU9TyrWPGO8BKI1qqoMLq3gwgVa8lFeqWV9A670YcybPRXiv59DpYuHdk6C0UN4uPzAmxuX6fKDv8G6mY%2BOcXVKIuzLRCvU7Q%2Frw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79647b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13800,"size_decoded":5336,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13799)","md5":"aa20b6e0418d20fb86b071e670b2b207","sha1":"e38950c1bce65e9f048e305b3567ff90a0c923e3","sha256":"dd1f9acf13b12f189da475e0f23c7c505767859ab620aac636964974093c281d","sha512":"b6734ce8f3cd3957d9e6c18fc3a853842adc5017aab76995124dc4023f2d0adb8c1ea6ee566e7f1ec65a82bafc5b669a144fbaaca201c86c106c49e6a1dad856","ssdeep":"192:mOaHX24ysbeCVXVyILkYmTpOIytlomlBpOIVtlomlrjm5bovo5FglaZW0fNacZgu:mVpyRSVLL28HVjkFglMfNaEg+l","tlshash":"91520adc7286f166475394bb417f610bf2f154a4684d8040e239c5e73eb989aca33eae","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-10-15T06:12:37.467003Z","times_seen":11492,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/img/author/a-1.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.568Z","timestamp":1789067880568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/img/author/a-1.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 22 Jun 2025 13:07:35 GMT\r\netag: \"68580017-39d0\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cdha4%2B%2FAVmJywlJ4bj5gf%2BTbHeUNIn%2Bb3OnFOKcTCbCq6pFs3Spqv99j8biv270cW0%2BAcSJ9Gy4eoMT3q5cfXKZbM2FyeEZ3Cd7GfU7Es6iCw5F%2FmoKnn32hpgT7Yw%3D%3D\"}]}\r\ncf-ray: a390c6ad99747b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14800,"size_decoded":15532,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 160x161, components 3","md5":"7811647b2ce2ed69b036cf3060d47e40","sha1":"fa30552fa22ad258947ed877385b9ee5c08bf7dc","sha256":"9c658ff69d4e9d99afa92b676ceffc704e819c59a5c07dc474920673697d19fc","sha512":"586e5f3ae8802b18bedeaa0be1889108f6d019659d322d8f0b402d5aff59bac0a440ceb9af2738b8ed335ab3380f6dd643e384b309d76de570b4ad7c9973f773","ssdeep":"384:wYNg7VuAj64WzPx8Zsm427CGyseojeGovVmOABZ+CeTt:wYyNj64CMs0WGyKCPvmQCeTt","tlshash":"ed62d07eda2b8e56d7f2cbb119bbffa072d2b7347217225c11019618305c1e0661aa9f","first_seen":"2026-09-10T19:18:39.767242Z","last_seen":"2026-09-10T19:18:39.767242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/img/favicon.png","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:01.128Z","timestamp":1789067881128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:01 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 22 Jun 2025 19:19:21 GMT\r\netag: \"68585739-f6a\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNbqLyFkg7TpBlHkCwjVNBJVD6sZqrS929J9uFI6yOmPREjLweh%2BBbWyHAv8PdFsNqPywcoJq4%2BGHLpjaUYj%2FOIG9ZJDZbQ4MLcL8hTilu9DINbRqL6vXufLOjnX7Q%3D%3D\"}]}\r\ncf-ray: a390c6b119bb7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3946,"size_decoded":4672,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"651d152e78d88d9a4a6637639e47fd4b","sha1":"eca2f8bdea8f65a2cae97b0c0c1f3a65e26e373a","sha256":"6373adc74c8bbfca783ff888fd99b8ca7e498246e65609b1fcc55c6c25683bd3","sha512":"c6bdb56ccc0def7063958235bfdfccae5b4181866213e936447341cdb548241cc584ccc33617963ad2f9e568e19efaa1067534c3961fcb34f03b9ebf8a143672","ssdeep":"","tlshash":"1e818e4520841b7e114d4d7d642ffc55897afa9083965e0dddfe920ac210d90fcbaf76","first_seen":"2026-09-10T19:18:39.769937Z","last_seen":"2026-09-10T19:18:39.769937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/about-us.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.562Z","timestamp":1789067880562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/about-us.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 15:53:03 GMT\r\netag: \"6856d55f-5fe5\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfAltJtvtUCls1ICyf7VycABRUVjrra7mzaGeZAV2tHwbrgPp7kPh4RvQv5xEsDC5EOC00zObw8FAKym%2FgTh1TL5S176IppWXdcgQ%2F5VtZGmM%2Ft5uEqojR%2FRym1dgg%3D%3D\"}]}\r\ncf-ray: a390c6ad996d7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24549\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24549,"size_decoded":25277,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 975x650, components 3","md5":"47a72948f368b3f20d13834e0ae7536f","sha1":"4f1f41321c0aa5a174591d0878334b0fde09b9cf","sha256":"09e71cc3867d1267c7da064d16ac9f7011460a3c57c48cb41550206d9ef722f8","sha512":"945aadd3f6554e1d7f35bdecc95a7bb271f078fda39d24daba0f79e40128474f2d320751f0a4fc4634184688a27ddc2f27a52f81216099ccc4e7dc0f94264205","ssdeep":"384:fYNg7QxvADG9JGLqLu0HOUUChByjIXKa8TvuoE0fdQ7jdcTNhJKx:fYya4GC6ufa6a8TvW0fdQHdcJh0","tlshash":"4eb2e152f967fd2bf1f384383066ceacb2352a20c3a77b1565f56c5832656c0a96c11a","first_seen":"2026-09-10T19:18:39.772988Z","last_seen":"2026-09-10T19:18:39.772988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-10T19:17:59.880Z","timestamp":1789067879880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-ray: wnp68729:0.000/wn68729:0.000/wa68729:D=2176\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5SUxWzPsDy%2FKgrQFT1D5QFw2f6WPJMxGD%2ByDH9hHX91emROnHIMQfHSyllTIvhH5etTViyyVkcsuAmZERlzDTrv4V1%2FjkGHXBBCxLV9RWpf6eL95whcvmsGUPqRLA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a390c6a998c37b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":72312,"size_decoded":13540,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (426)","md5":"8df21184bcaa1fbb151e235889e207cd","sha1":"8ef518ebb661d54bc0a2dc61009df13f1e873bcd","sha256":"8f7fab521338e69b22044a2182f336bd35330a654dd7b7e4c1b0312c67f42355","sha512":"0825ae5a680fb41ab10c402260176e7bca25b4456d943d99a4559a0d4beb1f34bf27026470f3bfcbd26351b2e1a66a5cac55222ea4419f7e125a9989882ff0e1","ssdeep":"768:V90psHCkYbA1cuBifUD8vN2WBF7f4pRrSSDOK1Q0GenToZr0zlCI:L08CkY8WubSN2WLuwEGXZr0zlCI","tlshash":"fb632b2674f52037159390c57ea66f1b6fe0ea03ca1b161836ac0be95fc7de2dc5321a","first_seen":"2026-09-10T19:18:39.790219Z","last_seen":"2026-09-10T19:18:39.790219Z","times_seen":1,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":6,"connect":41,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.528Z","timestamp":1789067880528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 10 Sep 2026 19:18:00 GMT\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":2283,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"261808772a38bee61a32aa80be774008","sha1":"7fef323fd8fdbb99eb6ebfd2678c73afc7e7e83b","sha256":"02277c4df3590949344a542c33081bb91aef4d64b4d68684d6679c8aa59eccf2","sha512":"e0a343fc046cfde2b059e823bb41566f1cf929b809bbc527fa2d9e33c613edd58802da4e2c4e5d8b601e1be2027ed32e34ed413671a8aa5a51bce84142f5002e","ssdeep":"192:2N9fmN9fN94N9fkN9/qbN9DbqGIwV4BN9nN9uwN9iN9fXN9uN9NN9fZN9/qqN9DK:89fM919W969yh9/qY4X9N9t949fd9k9E","tlshash":"a3321fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T22:49:36.283016Z","last_seen":"2026-10-11T09:00:44.784809Z","times_seen":7707,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/bootstrap/css/bootstrap.min.css","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.531Z","timestamp":1789067880531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 May 2025 06:07:46 GMT\r\netag: W/\"6819a732-38a52\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xie%2Btmllcbbv%2BeIB4V4NTpLqDX7YYhiaJhGEi7I0YWm1n37DKCvCFrShdCMuwITQZh4dT6e9xythXmATzQMht48ysFFRFwyTHa0YVk6naDqTzHzb%2FewHxg4e5emoLw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad695b7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232018,"size_decoded":28942,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"945fb3ff8106aaf5eda73c29e0d47826","sha1":"371e7aed5ab297634a9e062079e449010352bd03","sha256":"a31a97d0b41c95bbebb09b7c2329a4c672129f8369d96cb6ad8f638e84250c48","sha512":"638a3dba2e120f2d3de87bae724bf76eeeaf7f2dcf1b5ef44bf1093b77c3d77109338476339883ad3b0360aae6ed4ef58fd208ba997544970181de9c6856c120","ssdeep":"1536:c9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:snXp9GfrV98II6V6pz600I41r","tlshash":"d23482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-05-07T12:30:30.077636Z","last_seen":"2026-10-15T00:24:02.329494Z","times_seen":1400,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/glightbox/css/glightbox.min.css","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.536Z","timestamp":1789067880536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/glightbox/css/glightbox.min.css HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Sep 2024 10:05:54 GMT\r\netag: W/\"66e2bd02-35b5\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FseDyvJwuYylgTZ%2BhEwsx6Ub%2B8YgrK1dt3NIUd8iDUC0mWxw4pTGOAUZOpXVaT7chmB4aNQEGmWx2zQHuoSbwGaBerVfiDjX2lspvl8KZIIX9JN0QWGhUCi75iPGg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad695f7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13749,"size_decoded":3139,"mime_type":"text/css","magic":"ASCII text, with very long lines (13749), with no line terminators","md5":"9b438b29cef1c212d1c65a877ffc7232","sha1":"3b5b7904f4f4bcf55959c2ecef50821bd9110021","sha256":"6d3f62d4d17969f9c70e9438cf671004725019e868123f2ebc295a006f8d5d2d","sha512":"4fe2a81b77db0e84a7960117150ab07130bd01d905231841966a1a16a61a223ab64a184dc0d6a8f4029a2d43cc7f08813cbd1273102d73e5186c7020bddfac8d","ssdeep":"96:dYUCW2PjwbN18Z0DUPolXDOYCdBCg0WKyPi3AFkWdLpjxMchAk3:dRCD6ZrdKYCdBCg0WKbIdKchn","tlshash":"a4521323565032149057ca161ad8d6a80b7dc133ea226fee77c1fa91c7c3b8b14b2697","first_seen":"2023-04-06T16:52:24Z","last_seen":"2026-10-15T04:57:31.17033Z","times_seen":6538,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/proces.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.563Z","timestamp":1789067880563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/proces.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 16:07:13 GMT\r\netag: \"6856d8b1-503d\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiWE7f7PJP2VFuTDIkFhcS8xXqSTHOw1HcE%2B4LihRPAu%2Bz%2BEx9oIpiaTPjXmf8dSNd3YzHcmskvoG%2F1Sqw4y%2BgnKR%2BRQaV7KHlytd3NViJ76d8GqUVfQZzyVmpaR8A%3D%3D\"}]}\r\ncf-ray: a390c6ad996e7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20541,"size_decoded":21273,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1024x683, components 3","md5":"06dbb8ef521bcd990f3a3e57a31132e4","sha1":"42bc5e978d4a001c7fc59834a0f215ea66265f17","sha256":"44a5316132c3231d2be65f1f320222f1fdb67b0c0ba5d53fd4d041967bf82cf4","sha512":"b0bf674754585e8c72eb5fabe2c2166cf3d83e0d300b174a1ad8a823749f681564464333d22124ca6707ddd63731b7b77986091ef76ebf8d6d5a7bd5771f1fd6","ssdeep":"384:fYNg7EyQh1xPlnRQayRx6hrXYesAxp0kbWcJkZL8k/OLQ+ElUTp4ebkh:fYyFQhrPlRSkLNRv0kyc03iGKpk","tlshash":"5892cf83d266faa6ffc45ef04593cf22f1ab1319f15ba1a043b6c219394e5705bd80a2","first_seen":"2026-09-10T19:18:39.800723Z","last_seen":"2026-09-10T19:18:39.800723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/security.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.565Z","timestamp":1789067880565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/security.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 16:14:42 GMT\r\netag: \"6856da72-7066\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3op%2B%2BAxogfUOe62827bld%2FovozOCQOgwUcsI5AiP99%2Br9TQujKqnFiRmV2D1uuxWtitYtvBegOu1LetbUfctmw2uXHyX41nnRCK%2BJ96AbBSI5Zk4URyMWkFbIhKNA%3D%3D\"}]}\r\ncf-ray: a390c6ad99717b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28774,"size_decoded":29504,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 600x600, components 3","md5":"10a859b9dffd4f7c3913b20fb431e4a8","sha1":"e6fbd1868fa404f9f8c9a6d79600f187097eafc2","sha256":"282b55c4af59c2d0e222024ea1dc1d19e6b1ce3bc4d35e5079ab17e7e36dc17c","sha512":"cd642100df1cdf3daf21e969a1cd435ae86a2ad34657792dd2ab2836d717bd6f015f808d15c0f0b5e67169b0e8c1180a7e84d985b0daef378fedfcc598638e5e","ssdeep":"768:wYyLB3Pa+20nJxTbvDGmF6c+wcKhC8xPiZRE:wBb2KJRbbr6cVdDxT","tlshash":"22d2d0bb163b4fb7e654e03814f29b80a4e4072dab6fd7185476ff1e21118c82b8e05d","first_seen":"2026-09-10T19:18:39.819806Z","last_seen":"2026-09-10T19:18:39.819806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/voucher.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.567Z","timestamp":1789067880567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/voucher.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 16:24:20 GMT\r\netag: \"6856dcb4-997a\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkFNLXRNsfq05OWQFwtb1jA7M2B9lxLdP4UoLvsXaeyBRMAsM1DYghImbWRN1ijUMHUi7r9lVpYF0x5d71wsaS7yGwm86BrdDzau4%2BgTlioz9%2BUEipnpgsOxDWf1Qw%3D%3D\"}]}\r\ncf-ray: a390c6ad99737b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39290,"size_decoded":40014,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 600x600, components 3","md5":"84457f6a7438e690e7c267b967065f54","sha1":"7428c316e5e4e8b623bcda1686779201154724a5","sha256":"ea64b9e7253ed7f4bdfef6332d7d5ed9a2d1721d3c5f4522e41e868d17b42592","sha512":"edfdbc7c1ecbb27742be3c4055dbcca4e36fd0d5751a328e701346120d8ad114cd9ab4fdac1502daec504a25a2b3975ed76372a55d4a749c9f32889931d68fce","ssdeep":"768:wYykOcwSEZTJxsUHwa83eQaPUIF6x2yxFIggvo843k8U66F7avS4AWi7V:wTfakwaasPNw2ozgw8408s7QiZ","tlshash":"8c03f131ab63e51be181c23c1c3ab7ee1d6d1691e233da971c5c897a99d50b8b51c20a","first_seen":"2026-09-10T19:18:39.82261Z","last_seen":"2026-09-10T19:18:39.82261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.908Z","timestamp":1789067880908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://demaro.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 12:44:16 GMT\r\nexpires: Sat, 04 Sep 2027 12:44:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 542024\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-10-15T05:27:04.354491Z","times_seen":17929,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":21,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/isotope-layout/isotope.pkgd.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.551Z","timestamp":1789067880551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/isotope-layout/isotope.pkgd.min.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Sep 2024 10:05:54 GMT\r\netag: W/\"66e2bd02-8a75\"\r\nx-ray: wnp68729:0.010/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikJO%2Bc2rvU1boIhrku%2BO%2BxqPSUtYdMlCUVVKbczG7C7bn6aiDdHAZw7WVfs%2BFv8wgOB8XUlS6CjkoNG5rAofwJ1yAMxjq6s9LPCqiOoYx0tYxtNkcr2O5waFeERumQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79687b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35445,"size_decoded":10346,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-10-15T05:34:06.757181Z","times_seen":27760,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/show-1.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.560Z","timestamp":1789067880560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/show-1.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 12:45:22 GMT\r\netag: \"6856a962-8cf3\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDpCks0ALVH93fD%2FtRL6X%2Fvv3Ij2d2NX%2BTNcR4v%2FgEytqZ4XvpqfJcWx%2BsumODshBUlmYnFffSWF2HgVkwPm3bm9uTV1AjjQeZlMnByJVhJP7Vp5zlHJp5YbJfKyyA%3D%3D\"}]}\r\ncf-ray: a390c6ad896b7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36083\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36083,"size_decoded":36813,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1035x675, components 3","md5":"e66c2d07c737fe43e399a7ada7864299","sha1":"c5a787a9c4e759a7dfd036097ea797234c36728a","sha256":"0f32c2ccebf0df520ac943f6877c537dc8c7ae8ee98c526ae79e4ab287cb17ad","sha512":"52e5c898e909763e20cc5c8d18d42263cbcc6a125749e9775abbb5114eb6bd53e2ac3a9a35249257204f1e1a7ba69504ff1a3b1b13b43386593a858b44246732","ssdeep":"768:/3a2zJ6IS+GOioimjdewg34YAmhKmsoX+GC7yPi8tP6730LglCizg43:/3vLS+GORi2QwgNHhK+XqyPiU20ZE","tlshash":"b4f2f1b67ddf0252ce8c6d71a69bce5cc30cc1ca1942ae7f95442a1b52c31819b4bba7","first_seen":"2026-09-10T19:18:39.82534Z","last_seen":"2026-09-10T19:18:39.82534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/proces-2.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.564Z","timestamp":1789067880564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/proces-2.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 16:11:52 GMT\r\netag: \"6856d9c8-5c9f\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EF8A3tO1vqwjMhhXEi4u9dIV9UG0yt%2B6CZjZ5scoJvTZs26FfBww0w6%2BTZMV2hFfKwO2E8gAk0Gv%2BR%2BdEESJfks%2BAhfCo7qcXnqAaZSKtBDB7a9Nc6pNRthQyGyLA%3D%3D\"}]}\r\ncf-ray: a390c6ad99707b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23711\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23711,"size_decoded":24441,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1024x683, components 3","md5":"1a50eafbc86304f36f2b45bd5a0f952c","sha1":"af3bb25e66678079e4f96d1e3e76a1435c260c6c","sha256":"3587d8fa6df9fddfdd0c7a9c577030d118ed6f4a08c6717fd721e073d0507ab7","sha512":"7171b29ad7acf628095f926aa9ec3be927ac122de8442cdc446baa3922f7b9a49429e633f3b0f1ed4a8c579140d868d96969f1f4cfe1cf77a1f673545ad9d219","ssdeep":"384:fYNg7non8O4G4fiJ6dUCtBZicG0uKly2KDjyny1aYK8VsQqxIpczkSj+7PiXmGr:fYyUH4sJ6DicpflFKUyI3xIpczTy7aWg","tlshash":"6bb2e033ff999cd2eee3eb3e5072cf7826a2482d935366b544a4e70567571c140ce21a","first_seen":"2026-09-10T19:18:39.827972Z","last_seen":"2026-09-10T19:18:39.827972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/img/apple-touch-icon.png","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:01.127Z","timestamp":1789067881127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-ray: wnp68729:0.000/wn68729:0.000/wa68729:D=1147\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWqfzBDtyUmWvTHTG81Uyuj%2BTIcSwDPnxcZ7WYHCK21gZan7fKKjWoiG9jLzAJCGKap%2Fa8za4BEKBpBTpsvKkcfxP6MgX2sYnZHtIvNAT%2FHM19g8rU55sXA9GXZEWg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a390c6b119b97b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}],"data":{"size":36373,"size_decoded":8029,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (351)","md5":"ab3498a4dc926b4fc4bb5da73e51fc57","sha1":"5bc45775218c82694040659a78e9a89eb9154bde","sha256":"3b38d3a3aa5e0379e4e2d3e86299aeaf95df9b9d791aad903bf1348591fdbe5d","sha512":"53a989efaa5ba6b354beac56ab03d1b721c2ef5be6ff6b085f38da9ffb9f004561aae476c37e3edb9dc4abe877ba95890e51183677e0469ea14db4300d12bd5b","ssdeep":"768:Y9XV2WBF7f4pRrSSDOK1Q0GenToZr0zlCS:gXV2WLuwEGXZr0zlCS","tlshash":"b2f2922274f82527119680947fa27f1faea5d103c60e6519319e0bfe6fcadd2cc9724e","first_seen":"2026-09-10T19:18:39.83009Z","last_seen":"2026-09-10T19:18:39.83009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/php-email-form/validate.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.544Z","timestamp":1789067880544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/php-email-form/validate.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Sep 2024 11:44:26 GMT\r\netag: W/\"66e4259a-aaf\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxmmWnE4T4xCaecjQiABloZJxS7w6wWndS7YsfEuLC7xNNUPSvXsnMjUOGfp7RG5%2Bc73a3h2DpqdaDideYbWkNQ%2FDvv%2FA8cqVdsXsGNjNEraoPWfayHfpwiE2mxy%2BQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79637b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2735,"size_decoded":1538,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e52689e17b987b2059ef3a4ae1471e25","sha1":"02c7c1a3766de6ac39a8f2cfdb8ffb47d63d4281","sha256":"c513fe9eddde2b3624793d59b69a8a4b9edebca9b2c584558202dd3d296f3831","sha512":"78c4553374fd8cf473a6cfc52fdccd3f512c4bb45cd4ba248887b99299638403153c93af662398d6a01bb7f950244eabdaf0aa3df4e869b96e1145029344e2e5","ssdeep":"","tlshash":"0d51eb5f166916738a3367f55cc64a80e238503fd98046a67d4cc50d2f384e1aae8fe8","first_seen":"2025-03-07T19:30:18.750253Z","last_seen":"2026-09-20T06:23:24.525308Z","times_seen":141,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/js/main.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.553Z","timestamp":1789067880553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Jun 2025 12:46:02 GMT\r\netag: W/\"6854068a-1269\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUkBmfWhFdMlg6xR9hjKYI289BZ7Tdm6W%2BsNN3N28OTp7Gw4j8AuVDjTTt%2Fq6uIJMCl8UlEu396nchv%2FemfI7HKU5%2BsQWYQtoOivC1DBLR%2F50pmFhYo3f2vXeihpwA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad896a7b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4713,"size_decoded":2068,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e88c3ccdd77122934faafbea50eefcfb","sha1":"8fe3e2d4b6b65e30eb772a9b5b1056c9c29183bc","sha256":"fb36bd2c6515d4df1a6a8a766e7a2b470baf77a94a1f02f760be7920a6624b5c","sha512":"c53647a9ca7ac243078865e08ef9a53cb92529c0cd0867fb024401b198503c802c3d335a165e3f7594d818bce8693aa8b1ab5790e4de26a389de5b3a89b5dcc3","ssdeep":"96:u6kIiOYE1CqEJaVNEo3ruF1sDPdjLhEr9/umP5EEq:u6kIZCqEJa/EGqFGDPdjLhEr9/umhEEq","tlshash":"62a124167af10c7340f7a9eee7cb67c0b615119f508688133e9c8b489f416b947b2be9","first_seen":"2025-06-24T10:00:53.578921Z","last_seen":"2026-09-10T19:18:39.833849Z","times_seen":7,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.906Z","timestamp":1789067880906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://demaro.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32422\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T05:36:46.288221Z","times_seen":328351,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":20,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.909Z","timestamp":1789067880909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://demaro.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32422\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T05:36:46.288221Z","times_seen":328351,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":28,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.542Z","timestamp":1789067880542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 May 2025 06:07:46 GMT\r\netag: W/\"6819a732-13b67\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTI4DleB%2F%2FVvv9Oo8Dj9N644pAuCRpelfRFSHkYmfFiOjQH%2F78NEqxX9n0t5UZtVHgoz8eOJV8yJmbmMVv48OkQxVlROp6G%2Bw6YSs51QWxCDvTKb9u2lx6LVLBoGvw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79627b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80743,"size_decoded":23717,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"43629cbd1e4634150e99b74d2c35a725","sha1":"c7827462c3ce7eacd5d4fbc975f6fd572b047778","sha256":"cb789b7cec81aa580177e1b3c0561011539974d243d3a1de0d78a1a278015cab","sha512":"4ea578e2f27a56cb4230cf24b28c643b2ff1c4ef7bb0a2544b138280b772b30e10470e244d52f03a6c65cd19eeb5fe8db8d32db78f1430910cc9967b84c31e6d","ssdeep":"1536:iSwyiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcGRO4qchsE66:hwos+SSO5q4tZwcGw4qz6","tlshash":"c983b5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2025-05-07T23:00:00.35056Z","last_seen":"2026-10-15T02:56:20.882521Z","times_seen":1452,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/vendor/imagesloaded/imagesloaded.pkgd.min.js","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.549Z","timestamp":1789067880549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/vendor/imagesloaded/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Sep 2024 10:05:54 GMT\r\netag: W/\"66e2bd02-156d\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNY3w%2FlyBCqllvoWEbEJXNBXrT55bkkaTRxSpzY2wKbboNWxHFXKnKV8E8Cw57xKrkRJwQnoCCm%2FfNmONOwopO%2BPp8jSZ6Ei5KjzXL8yqK%2Bb75RZ%2FjRh9hULkOv%2Bag%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390c6ad79677b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5485,"size_decoded":2420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"919bcd36ba45f4ae408e47ad200e0cc9","sha1":"de12adeba034b0e200f9a13623852f1e2cdadb4a","sha256":"86dacb15f649eafe6e74e1bede434b20d20a87682fa0aab01211d87d34cc2027","sha512":"91fb370edf6ef5870e888b78acd70f53377234d3bdb151903e266cb9bef2c20ea5456e4ab8ad66d78e489ab1477b72cc5971e77682a8d984575b2f2b9ce7122a","ssdeep":"96:bwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:bwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"89b1218db7737563125aa0b2b31b430ab3f6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-03-07T14:53:01Z","last_seen":"2026-10-15T04:36:11.878403Z","times_seen":5417,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demaro.site/assets/images/zadovolennie.jpg","fqdn":"demaro.site","domain":"demaro.site","tld":"site"},"ip":{"addr":"104.21.2.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demaro.site/","date":"2026-09-10T19:18:00.566Z","timestamp":1789067880566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demaro.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 05:13:39 GMT","end":"Thu, 19 Nov 2026 06:12:11 GMT"},"fingerprint":{"sha1":"2C:86:F7:C4:CD:52:F8:9C:85:65:2E:45:2B:E2:A3:D0:BA:BB:8B:9E","sha256":"2A:59:D5:2C:0B:1B:5C:BC:E5:73:FB:C5:E6:9B:4F:97:18:BE:8D:7C:5D:BC:FD:5E:43:09:27:5A:AD:94:8D:E1"}}},"request":{"raw":"GET /assets/images/zadovolennie.jpg HTTP/1.1\r\nHost: demaro.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://demaro.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:18:00 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 21 Jun 2025 16:18:38 GMT\r\netag: \"6856db5e-c789\"\r\nx-ray: wnp68729:0.000/wn68729:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zp0tdhmXgVHE%2F32l3kGiQ6V4hw574Iv7Up28J6lpM1cjpZmhyRSWFrV93SLEg1LTHRAys7g96FFDFNOhvDHhLNMfmaL4c8BDaUaKmVDXWHnxscsp5%2FbVXI2LTXAP9g%3D%3D\"}]}\r\ncf-ray: a390c6ad99727b33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51081\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51081,"size_decoded":51805,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 600x600, components 3","md5":"99031ddd1e078e45120adcdabe07f37b","sha1":"4def3ede51cb8557eecbd1a86c52a9e832ec2480","sha256":"115ed7d885efbd5192eece3ea0212fa6436f050388f933e11eb376826dea37f7","sha512":"c9f80d54b5469964ed3edb729e4ed7bb792ffa3713129398221dd902ce9332d56568bfde96f2bdc6b5153051e84748748f17191acb2584c908b68bf6524f5479","ssdeep":"768:wYy1BYxeHNfRe5aWnpHRV2KjH2D6D6v2Uyo7gXT1NiV7Kb9D16i1HAVVOqmQ:wDYIfReTeKjW86Qo7wq7KDjOVJ","tlshash":"a133f1b5fb4d6d54e7ecf37ac8c29fc4f11789dc80aac815b85ad5122180b87638e1e6","first_seen":"2026-09-10T19:18:39.838052Z","last_seen":"2026-09-10T19:18:39.838052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"demaro.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"demaro.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}