{"report_id":"c956327b-fee7-4f58-b10c-06b6a488cd90","version":6,"status":"done","tags":[],"date":"2026-05-11T20:55:50Z","url":{"schema":"https","addr":"webapp-tw.com","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"104.21.38.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"title":"Trust - Crypto Card","dom":{"size":35817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35432)","md5":"8b0f4a101da235bd63a6455f5b19bc8c","sha1":"c54d977a109d6bd179089b3b02c191172ec3c5bb","sha256":"59185e12c345cc7f1404453cfbebb134e55ce6af68fada9a04895a232e43ad45","sha512":"273d2bc4f26e9bc26e50d164bfecca9eb2d372fe2ef943100cc5a07aa573f0f9a3290adfa389655534ab36c3905ffa1004c413de657279e1f7d4503df8e71ac1","ssdeep":"768:Q+MuKF7KQif8BF8w9drbh22HmA9H6XA3Dj6t2:49if8BFTnrmA9aXQP","tlshash":"aaf20a1af610d636c9271e9931bf7f7620a9d069935204f8b6dcc65c03e68f8a6b34c3","dom_hash":"domhash90fd0bcba6590e944930b8cdf87af058","first_seen":"2026-05-11T20:55:52.842477Z","last_seen":"2026-05-11T20:55:52.842477Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"webapp-tw.com","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"104.21.38.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T20:55:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-10T22:25:41.533246Z","alert_count":0,"request_count":1,"received_data":234494,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapp-tw.com","ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-21","domain_rank":0,"first_seen":"2026-05-11T20:53:07.683089Z","last_seen":"2026-05-11T20:53:07.683089Z","alert_count":28,"request_count":14,"received_data":505887,"sent_data":6375,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/493-fb9a011a516e74e4.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e61fc91791d3c8d1344c7991f1c16c","sha1":"e244327ffe3f6566c8d78bb27458c03d3a074491","sha256":"696cb8fbb0a02f04c5f60bc95674e4a7a92dc0bfef9d1c290b475dd7beb1187a","sha512":"75fd78549fbf2a0998529b019c025e43b06c72347558202f575c2dea10289b27eaa55c2ee998c5e940c7caeaa8026c99b894165a3319725e8a810b4c1e97fec3","ssdeep":"1536:0zigN+KcB/cO5HYHqLVcXl7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNwrky/Sz:u7MtmA+Vy4r904Aj44RNsz/Sz","tlshash":"3704d9b676d0f8e107a780e5843b400af3291c37146f74a0a3e6dcd975645dea1b3faa","size":173891,"data":"","first_seen":"2026-05-10T13:09:49.334066Z","last_seen":"2026-06-11T21:52:43.598905Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/main-app-9385f90742f01adc.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cf2161b5322f427060666df7ba82faa","sha1":"0b399f9b6bb24d00dff19ca87a83fabc312f0911","sha256":"b8c6fe5eb9aff8f5540583ca87ac2e7ab5b749d0e4d43d2c766d97c3ec032def","sha512":"508677256a59b9b6deb54625e8c5c2628e59594361b5833e140b1d6779f23ad7b44029890d66f1173ddcad24e20bdf13e4a57c5641241b534b5f60b5447e7677","ssdeep":"","tlshash":"55f0d65a4f0cf92f5d26ad64fe97ace2285f4175202b4ea06901de612c23b9dd270405","size":569,"data":"","first_seen":"2026-05-11T20:53:12.158836Z","last_seen":"2026-05-11T20:55:52.86149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-07T22:23:16.261557Z","times_seen":217175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f67978e1c3d3abb5495d3c26c48d32de","sha1":"485d92c8a0dae218e77e436d2b54e6e6bc3dc856","sha256":"2345d000e821022849ff8f3613878351156dbd341ab81c019c639cb259c0d4ea","sha512":"487afd48fcba5f662e180645bc791c8f6a6aa6212c060b3dfe0934194e877426a66f424db96895e75e878202e74d21e1f54c9419f4f0da8d7f43b6839a8fbc30","ssdeep":"","tlshash":"0211ce44f346f8c36c22df1a912b1d7080d4fd7e4171a988329fda160222ebd9384416","size":1001,"data":"","first_seen":"2026-05-11T20:53:12.160475Z","last_seen":"2026-05-11T20:55:52.866451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22566b0b59c6b748bb1440718a528ae3","sha1":"5f3f9f22e01f0c1418c06c10e4572df48395bd4b","sha256":"4e0c5e4c1fd780a3fac734035a13d31e8d58f3eda9758fc484071f8310bb6749","sha512":"8e2e1a5afa02a63b3b3e1505726b3f7978a5feadbe0591a2d702f3fd750acfe6271dbe5bfb98afb2ff1917847002f31a84a11bcceb3dba2d31f2f8f08cd03d11","ssdeep":"","tlshash":"9e31ef2e5805dd4bec7e3da9023e9d3b60cc89bb4261def8818acf581b4647523dadc1","size":1725,"data":"","first_seen":"2026-05-11T20:55:52.867082Z","last_seen":"2026-05-11T20:55:52.867082Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4468343f321e5e7a30d832842c31337a","sha1":"b10ca297703dcdd9d5fbca8f186fd44e9ddd4921","sha256":"6d81ffcb7a21cfd0eae40368a42867a57741e3c3232efef5993f529e96ef7aa6","sha512":"f0873ae4faac24d05fcb7aa73d434cbf9601115b42d98b6f1c99f1cfeccfe63e46b63f48a8c666516b39fef10b5f7ce9086662835c87cbb906d456f0e2abb4fc","ssdeep":"384:JZA7qbhXvO2Ei6gInIhz9f/6XYXUOKRe1hzga0Wyq0z:Jrbh22HmA9H6XA3Dk","tlshash":"1072931ef304d225da872fa976ff6d76205981a5038200f87adcc61903669fcaaf75c2","size":16655,"data":"","first_seen":"2026-05-02T20:56:00.093639Z","last_seen":"2026-06-11T21:52:43.606909Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2bb024d47dae849c0d174b0792e5e3a","sha1":"3ba4bfe6ca2858ebba3478b989d4fdcde5ad58b6","sha256":"b8d720d04d7fec212539ff8a0bd3208b516bb7b8327e3012f4a3d393803bd0f6","sha512":"a528af0b55b5519b7c4af262ef75e77d21a67b11ecff2aac547a06e2da356a34473a8b87fb0c4ef145a5ae94cf1c8d7f42dfc26cbc4201fcdeafab883abe10bc","ssdeep":"","tlshash":"ce9002b881489c2d697378531c352c02019c880a00451e5453d4ea44271557ab605d4b","size":55,"data":"","first_seen":"2026-04-21T17:21:25.957951Z","last_seen":"2026-06-11T21:52:43.608317Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/app/layout-e0eedcfbd9832d31.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21eaac2c1cb5491606f788a3b93bf2a5","sha1":"4ced2c99906741817633781862f7e5725e8cb54d","sha256":"7a61c89a07b8c97d095326db0d84327b3f948f387af8396d96ed8d5e5884429e","sha512":"a416a7718968358f2620584fcb93b33a80e7c317f5afa8c87c0e13306c338b3644608f2d7b3a637dcd95f4b261d07a5e919ce26336a3fc5c537b149616d89819","ssdeep":"192:D39uc5jz6noBDLpjD3dnz9I9eJja6rWkWVxCq16:D3jj4SjKuIkWW","tlshash":"99e10bb23681fc3546a68480e837c6c2ba151d35241fb8d0f7bacced3664e88d4a1f65","size":7348,"data":"","first_seen":"2026-05-11T20:53:12.155275Z","last_seen":"2026-05-11T20:55:52.865318Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48aee6a15db79ea057d4e341c6ed5d91","sha1":"8e753d144d760caea03cf3f4ae7bfa7cff833f24","sha256":"514be39206a8c450e93957489b3dcbdcc3a8ced46c4dbaccb6191fdda399c535","sha512":"caa4394bf7f3414770c005c191d01fd062bc39a75eabb6480d40c463d888f963e7916405ef7fb9e80df5e03dd2c5ba31b8012b40c1581ba30d8ccca4b043a8ed","ssdeep":"","tlshash":"b2d04c88211b4c7156a72a454f6fb604b056621294919b217d1e63485f21e17d754854","size":224,"data":"","first_seen":"2026-01-10T14:02:29.698224Z","last_seen":"2026-08-05T11:33:34.350947Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/app/rlrdwihwsz/page-dc15ef3f44c56f04.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e57911d139781f408b45e5401ce8ef6","sha1":"9d43f80dce2899f8db168b0e91151b96b5f6d688","sha256":"81bcd7f16def49f583c6d653019f4ba8336c9ead9aa45f91af36af3bf39af101","sha512":"7bf0a4dfcd9b488b36827acaf064af6eeaa7d0e2d971826d87ccf9adb0e6f9741a58667ca0579ad2bdc9d5468d73dc3e06ba396598846b06e7da98c36166fbac","ssdeep":"384:ah+pmT9u+5Gty/8DBmaM7JZE3/YRismdj:STXFHJrEJdj","tlshash":"fb62000ae159ffe4b8ab09c97a2bc86d623f3248df4614b5bcfc64141a590d47607bce","size":15036,"data":"","first_seen":"2026-05-11T20:53:12.150637Z","last_seen":"2026-05-11T20:55:52.862219Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f394114ccecc28123e59db083e45eabe","sha1":"2e073350ad4ebdcd76b90aa6bb3d7500ee0cd417","sha256":"3983c53d5681b8daec74548a18075307b9c9872bd6e0b34c28a4473e734ff4e2","sha512":"581210f266d3dd8a29d9ee3d4493919e85bbd3a5adba80733bfc1fccffe73fb41abf4f2e8fc5cf22b8bb7550d837b15afc93b7fc7b0f3f469c3cf5b47495a28b","ssdeep":"","tlshash":"2531133d3008d94ffdae781d127e6d3650d9457b07e49a7c9bc8df0148820bd6ba6d81","size":1579,"data":"","first_seen":"2025-10-21T01:43:24.748432Z","last_seen":"2026-07-16T11:01:32.937603Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173024,"data":"","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/webpack-1224ce89ca00d2d9.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa8c07a4fde8875c8603f13ae7eae542","sha1":"f0e4db8f0d030a858dc52584a2b5dd41ec06b5af","sha256":"a8355cb5356a332a31bb2b80546910bc4384ada3fdff05e604c83601645d288d","sha512":"3d8f1a1506c4a108b5bad04c7fba7032d1baf11ebd14c7ddee925f3c0073228f8a0adf64a528ea9bc57ac17fb4fc88e9814b472aa238948407404199cf60ca1e","ssdeep":"","tlshash":"5571c5a53621fab166f044c65c7ed582f229313b112fecf0a707d8b9a424ad10562ff3","size":3740,"data":"","first_seen":"2026-05-11T20:53:12.158005Z","last_seen":"2026-05-11T20:55:52.862914Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f5bb5a1f1a5f583d4ed171557c6d965","sha1":"3dbf080e9907429ad49c59451625ddbcbcad657b","sha256":"7e1e4d9edffcb343ef7b1c4c9b38848cb2d47c32f93cd7487e3c13c53cd17e61","sha512":"95a1b897d7be041663d13b575f2ea848cc84f87b539cc6ad7832f05ccf5b3e95de0f28b8e11cbe7dc4e0b6bb64291a9b22f92df66e8e306a0645eda118e701f1","ssdeep":"","tlshash":"64f0a370ac41ce0ada2a7ea5147efd3434cd546f4141d9d789c0cd1e0901a763e71dc0","size":466,"data":"","first_seen":"2026-05-10T13:09:49.357799Z","last_seen":"2026-06-11T21:52:43.609485Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97c43fc02cee13f240eab3bd36af1ba8","sha1":"af92faf13207b21859f97729875688f0e36b8500","sha256":"72e13fad4e8b5b32d6d3341f5fad5534f233bdd24bdeee806912f265cef95248","sha512":"755f6a884c7814002f7e87388ba9fdfbd652a549efdf5db17cbac09a9952fbecac06a259f6d16f3bb2108c0ef252f76be86b7f49fb1c1b2f961ae9edd0f26042","ssdeep":"3072:FGiohPH0qDYU6GAuTZJc5rMUF77T8xNBDvsmTu47jaQOua:kPDRhe5kxN9smTu43a5","tlshash":"48341accb3dab06693a3a5b8503f014ba27e7992f84cc894f182d8c42d746599277f7d","size":233845,"data":"","first_seen":"2026-05-11T20:55:52.846244Z","last_seen":"2026-05-11T20:55:52.846244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:12 GMT","end":"Mon, 13 Jul 2026 08:35:11 GMT"},"fingerprint":{"sha1":"C1:06:F0:EB:DD:ED:20:02:C7:45:F1:99:5E:AB:32:47:13:1F:0F:7E","sha256":"E9:90:FC:6D:DD:F3:01:23:5D:A0:C4:C1:0F:BA:7E:57:43:3A:2B:34:C7:84:5E:53:F4:B2:A2:A6:63:4F:7E:CF"}}},"request":{"raw":"GET /gtag/js?id=test HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webapp-tw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\nexpires: Mon, 11 May 2026 20:55:26 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 11 May 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 85189\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233845,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4685)","md5":"97c43fc02cee13f240eab3bd36af1ba8","sha1":"af92faf13207b21859f97729875688f0e36b8500","sha256":"72e13fad4e8b5b32d6d3341f5fad5534f233bdd24bdeee806912f265cef95248","sha512":"755f6a884c7814002f7e87388ba9fdfbd652a549efdf5db17cbac09a9952fbecac06a259f6d16f3bb2108c0ef252f76be86b7f49fb1c1b2f961ae9edd0f26042","ssdeep":"3072:FGiohPH0qDYU6GAuTZJc5rMUF77T8xNBDvsmTu47jaQOua:kPDRhe5kxN9smTu43a5","tlshash":"48341accb3dab06693a3a5b8503f014ba27e7992f84cc894f182d8c42d746599277f7d","first_seen":"2026-05-11T20:55:52.846244Z","last_seen":"2026-05-11T20:55:52.846244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":96,"dns":0,"connect":16,"send":0,"wait":36,"receive":32,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/media/07a25e30db343ec8-s.p.woff2","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/media/07a25e30db343ec8-s.p.woff2 HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13792\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\netag: \"6a01b0fc-35e0\"\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 161\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gh7HsHFu2hKj3b2Q3YnU13nuS%2FEf1kjGIMyONwpcWLwnbngiZX3bFcWBF9XxNTYdzCHPs%2FIqPuyCKYwatiRECoT2hE6JUA%2FE8BuIJJ4%2FD89jZ8Y%2BgbOLJw82dqsCfBpG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa415a68ff8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13792, version 1.0","md5":"4ae2d48436b3d6fcab18c9de2f7f8fc3","sha1":"108fe3712707923941996546a4ba325a3f4f96bc","sha256":"c54a0fc890f9cbaf295a1bbcf745351b099182bf87b149cf6eeec856f46750bf","sha512":"9f3dff01a9823f0fdcef0eebc2b6a0d25ce20b534a577a02c411934c6425dd22c1c32861ae3f741ec6e04b7022d15bd0cdda89be07413361d9d9c0eea5a01079","ssdeep":"384:nMSLVRCzUjz7V5hHOhqjzXCmNZMHI9lJG/dS2:MSLVRCAcqvCwvG/dS2","tlshash":"1e52c0bc9e7d6d1b705f13f66e6f7675e582b92700076c4ab0514cbc2144b23b2e846e","first_seen":"2025-11-23T10:03:25.189462Z","last_seen":"2026-08-07T09:03:18.088379Z","times_seen":144,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T20:55:25.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5hSUUJhOld7RVx1%2BxXJLaIG4wHduRVSOZE%2BganfBYbqHyXUT96fAGqpYw1LK6hh5mhZS2MJl3SjIXZqPvOhxxwxdDgvAkZuMyqQwTpSZK1VPzgxyCGMH1qS%2F3jF0tUW\"}]}\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9fa415a1fb2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":34855,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34790), with no line terminators","md5":"e5ef4658e6823d03f35860b7f85b311b","sha1":"532453802d014045c5226f0ed62675371a893988","sha256":"e3a689b7d33d16b4a2fb91a12e382c26bb7db7e79eba1ad598f8ea3a191872b2","sha512":"d8bcdd5b51eefa77d98b9a840c816453b9de7e07b292f77d00c7a1a356d8251ae921054d04a53e34a3ead854ff465029f947c3c82d6cc1db570a6a2e31eeaa40","ssdeep":"768:fvXOZVZQif8BF8Rrbh22HmA9H6XA3Dj6tq:sGif8BFAnrmA9aXQB","tlshash":"63f2091be610d237c9671ea935bf7f7620a9d069935204f8a6dcc65c03d68f8a6b34c3","first_seen":"2026-05-11T20:55:52.849243Z","last_seen":"2026-05-11T20:55:52.849243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":280,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/css/554ced001e8c5f96.css","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/css/554ced001e8c5f96.css HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9a5v6ZiPuuAVBK0LuD7uU2n%2FSV3tms8%2B%2FjRRcmZaMDe2znd%2BJ7AOg57x55uDqMysIw1oaEaMCcAR%2FRz6ooQzAX%2BNZOPmMTEzzmNR8Qoz2ncAAh%2B6Mz0DKJRter1TryF\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-3625\"\r\ncf-ray: 9fa415a4ffc9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13861,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13861), with no line terminators","md5":"4853c15abede620b5141b992fcdff80c","sha1":"eda66efb63ade9c552f65f16a09c5302f47dcd49","sha256":"6315243ca1a4e53f8e1f94d14149b741d1d8db98d248d0931fca77ed21f072ff","sha512":"e719d61efb00609d233250b0c488830692e796c4382d76ed874b4d48fb05f7bf8006d14db53fd93caf63734ca1d2a41dd491b6546624a5083765685011c453a1","ssdeep":"192:0qqU419CIsQLtAH0tgxl4WNCAD8nfFTIbjAckKrViGGlkMrWrJN3gJH8CAnjXfKY:0qqh+QhppAD8nfFcbjjpgSN0EnjXiFO","tlshash":"8252332ab5b4e029707bcc54f0969dceb8b09027b51203e5eca1fc75cedb097566328b","first_seen":"2026-05-11T20:53:12.153716Z","last_seen":"2026-05-11T20:55:52.850794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uPvumnGMuDHu3pSIg%2FiSQrFZER6FPtJxyysrJjNhszlcQYkpJcHXSDERa9Xv%2F9HwoFuB5WF%2FsU7PYyYEhnKBpIjSm5FV6vWiL3Y86M34eQzX2gD7l8AJurMPw0oP4Mm\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-2a3e0\"\r\ncf-ray: 9fa415a50fcbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/media/70355d4fbd533ab2-s.p.woff2","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/media/70355d4fbd533ab2-s.p.woff2 HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://webapp-tw.com/_next/static/css/385d1cca048e3fce.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20144\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\netag: \"6a01b0fc-4eb0\"\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 161\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vNjMk5tjbaRte2HuWno0z3dzsbvuhrdbvh1V5TX%2BZa6PN7EBSW7XsNC6qjzq2o8qUKdfJUMQ0%2BrnROMVrjF3bdU2AGv45csr4uU%2BwvIKEQbcI2wvmZySrYiI%2BkepbfM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa415a55fdec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20144, version 1.0","md5":"9b9969b222383443533022faa1a8dc15","sha1":"960bfc7f598d95e5e1f183f66f0b9570c59be7f5","sha256":"fd4c8e65080adbaf0cc819eb67b08ed9300e9274dd0069b382d286b93b9544a0","sha512":"dca295932532388d01fc0130671252a3bf707bd9a2e5608d69b2ad0ee9134a9349e2c45734ca8bc223ea4090e918420166c6944395852a108ef7d25a360fd2f0","ssdeep":"384:bDDIoOYd5DFolWnW7Hy2ljK3VB87feqOMtmna2213/p:bwYdFFolz7HyMjK/87vOaPvp","tlshash":"4c92e067de6d3916fcd415f04619ec1ea1b12f617c2206fb0cc8c946906da8d6aaed88","first_seen":"2025-11-23T10:03:25.17893Z","last_seen":"2026-08-07T09:03:18.06654Z","times_seen":187,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/icons/logo-two.png","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /icons/logo-two.png HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 10 Mar 2026 11:51:28 GMT\r\netag: W/\"103f-19cd7967600\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHL8Bdeweh8U6GoS%2FqxrKLSsk6QVbFb4h3d0wNWeLRvH6300K8AL4UvLMH4a6izQWo3vbyHZi1IkluIOMldwCDrOTDOTwzfCrLbnmAADoWh7DVm3VXPy2j90qsV%2F7qxP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa415a67ff3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 81, 8-bit/color RGBA, non-interlaced","md5":"58fd2a12f571cafad976ed5feddeeacc","sha1":"c7c0342c9edb1d20d96f26c0d713b83c4124b144","sha256":"98e40eaf5f022cb4f4e94991a6fbcc95a11f93545c1354237b2f40cca4d9405b","sha512":"399b57f3f371f14c98a8a1600ba028f721739d76511e2c1476aefb46f212cf58dd9e9142eb0f77e160644a9fec03d32405459658345912457fc19304aad69a70","ssdeep":"96:taIF26hHzU/RmovWsHQOJ9SNnGFHUikhpeuaeJNGYXRfCK0uG7SPR:n1zMhWsHQs9StwHLQJdRJ0XWJ","tlshash":"54817db5f830ccc0cc2d6c61d1ad6d8c103613454dc6b879ef96e9b3a2645d3145cbda","first_seen":"2026-04-13T07:55:48.870403Z","last_seen":"2026-06-11T21:52:43.59566Z","times_seen":64,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/media/70355d4fbd533ab2-s.p.woff2","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/media/70355d4fbd533ab2-s.p.woff2 HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20144\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\netag: \"6a01b0fc-4eb0\"\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 161\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J3%2FFfEKIXVWCzOzGOQyDh0H8rwYKpc6D7Oi8rCYGQzUnWw6muxnOJd%2FAVoWQqdpnJyi05seqgeUl8usuMnLYC1Z5JAcSCeCw3bo14bqTU%2BuuH8jmY8kJafOxfrnLjjAf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa415a69ff9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20144, version 1.0","md5":"9b9969b222383443533022faa1a8dc15","sha1":"960bfc7f598d95e5e1f183f66f0b9570c59be7f5","sha256":"fd4c8e65080adbaf0cc819eb67b08ed9300e9274dd0069b382d286b93b9544a0","sha512":"dca295932532388d01fc0130671252a3bf707bd9a2e5608d69b2ad0ee9134a9349e2c45734ca8bc223ea4090e918420166c6944395852a108ef7d25a360fd2f0","ssdeep":"384:bDDIoOYd5DFolWnW7Hy2ljK3VB87feqOMtmna2213/p:bwYdFFolz7HyMjK/87vOaPvp","tlshash":"4c92e067de6d3916fcd415f04619ec1ea1b12f617c2206fb0cc8c946906da8d6aaed88","first_seen":"2025-11-23T10:03:25.17893Z","last_seen":"2026-08-07T09:03:18.06654Z","times_seen":187,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/css/385d1cca048e3fce.css","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/css/385d1cca048e3fce.css HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rV3vo%2Bj7S3H6VJhopQDTh%2BTJ1RBl47WVC%2FmAzWTYM0xhGd5jY%2BULTxFdkORg4PxZgP7W%2FmY%2BwN2%2BGvcUtGgQlHyfsoH7PpnMYNA7c%2Bkfex5tM2tGzntn%2F8MA3ZJ2PWUp\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-2068\"\r\ncf-ray: 9fa415a4ffc8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8296), with no line terminators","md5":"a73097b533d338ab4c29630e1a60f215","sha1":"dcdaf3127f95504381b77d704a62ca7a4c91b34f","sha256":"a152a893fbaa11ce3a1cf6e625402d9b852515ebd2f1731e27d152694c9ca588","sha512":"6667bb1ec9ec33000a3aa7851486c58cac2bc2db317d366885e862ea9e972fd59db9ef175dd0455c2a38cd599ac6c3baf367fff07c8739bc97008d16a2c84539","ssdeep":"192:IWxYYgWxmY3WxcYGWx2Y4IWxou+BlYfE6:FBtvQ1b/4Fou+BmfE6","tlshash":"7902be34c42e848ed932fc9231cd3f13283c141595e55e16efad99a98edb827b3e1b58","first_seen":"2026-04-07T15:06:50.299958Z","last_seen":"2026-06-11T21:52:43.593994Z","times_seen":69,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/main-app-9385f90742f01adc.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/chunks/main-app-9385f90742f01adc.js HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGoKfZQ05TZGtZaGtkbgH9mY6FTokvqicALE%2FrJvWVJvMW5Il0%2BCYtjuZ1OTcAu0Bgrpkfxj%2FyVlrKRWrxHW3uQ1nK8QjWbwzivN7xr0T5UKBhWXte5lJ%2BqMAv4L618I\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-239\"\r\ncf-ray: 9fa415a50fcdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"8cf2161b5322f427060666df7ba82faa","sha1":"0b399f9b6bb24d00dff19ca87a83fabc312f0911","sha256":"b8c6fe5eb9aff8f5540583ca87ac2e7ab5b749d0e4d43d2c766d97c3ec032def","sha512":"508677256a59b9b6deb54625e8c5c2628e59594361b5833e140b1d6779f23ad7b44029890d66f1173ddcad24e20bdf13e4a57c5641241b534b5f60b5447e7677","ssdeep":"","tlshash":"55f0d65a4f0cf92f5d26ad64fe97ace2285f4175202b4ea06901de612c23b9dd270405","first_seen":"2026-05-11T20:53:12.158836Z","last_seen":"2026-05-11T20:55:52.86149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/app/rlrdwihwsz/page-dc15ef3f44c56f04.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/chunks/app/rlrdwihwsz/page-dc15ef3f44c56f04.js HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRLdf4xBxezj4i1ve%2FCrMfWuodhZxX%2FkMaA6ZlhGeSaRJ5MxmFw46Eoz64JVn4oFV%2Fgy7dfsVj0hC5sd7%2FVCoanjY08EKWS9ZpoKv8GiO9VUX8TG0NL2DY6vZx22wwYh\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-3abc\"\r\ncf-ray: 9fa415a50fcec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15030), with no line terminators","md5":"4e57911d139781f408b45e5401ce8ef6","sha1":"9d43f80dce2899f8db168b0e91151b96b5f6d688","sha256":"81bcd7f16def49f583c6d653019f4ba8336c9ead9aa45f91af36af3bf39af101","sha512":"7bf0a4dfcd9b488b36827acaf064af6eeaa7d0e2d971826d87ccf9adb0e6f9741a58667ca0579ad2bdc9d5468d73dc3e06ba396598846b06e7da98c36166fbac","ssdeep":"384:ah+pmT9u+5Gty/8DBmaM7JZE3/YRismdj:STXFHJrEJdj","tlshash":"fb62000ae159ffe4b8ab09c97a2bc86d623f3248df4614b5bcfc64141a590d47607bce","first_seen":"2026-05-11T20:53:12.150637Z","last_seen":"2026-05-11T20:55:52.862219Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/icons/logo-two.png","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /icons/logo-two.png HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 10 Mar 2026 11:51:28 GMT\r\netag: W/\"103f-19cd7967600\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nstrict-transport-security: max-age=15552000\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPWLtMWH18bHFc1suwkit2jiDk6T1A3SEpZMcgcF%2FfEiFRsOHloj4U44QyymrBSdetyfhWq1cblE3fzoB9HLclVHF4SYjcpvf0ZFnA4xNdjUZdKImX6oY95aMdw07ZQo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa415a67ff4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 81, 8-bit/color RGBA, non-interlaced","md5":"58fd2a12f571cafad976ed5feddeeacc","sha1":"c7c0342c9edb1d20d96f26c0d713b83c4124b144","sha256":"98e40eaf5f022cb4f4e94991a6fbcc95a11f93545c1354237b2f40cca4d9405b","sha512":"399b57f3f371f14c98a8a1600ba028f721739d76511e2c1476aefb46f212cf58dd9e9142eb0f77e160644a9fec03d32405459658345912457fc19304aad69a70","ssdeep":"96:taIF26hHzU/RmovWsHQOJ9SNnGFHUikhpeuaeJNGYXRfCK0uG7SPR:n1zMhWsHQs9StwHLQJdRJ0XWJ","tlshash":"54817db5f830ccc0cc2d6c61d1ad6d8c103613454dc6b879ef96e9b3a2645d3145cbda","first_seen":"2026-04-13T07:55:48.870403Z","last_seen":"2026-06-11T21:52:43.59566Z","times_seen":64,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/webpack-1224ce89ca00d2d9.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/chunks/webpack-1224ce89ca00d2d9.js HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDgzXGIGuQKr1O74jTE2IifOQujiPcjYVDYKR0B9fyzC4hspidt4JLo4SUhp4%2B%2BTTfWdv99t%2F0EKmfo88JAl12P75lC%2BS3b957vu04gRX78FspKg7DolU7OL%2F1eaFtEo\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-e9c\"\r\ncf-ray: 9fa415a50fcac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3740), with no line terminators","md5":"fa8c07a4fde8875c8603f13ae7eae542","sha1":"f0e4db8f0d030a858dc52584a2b5dd41ec06b5af","sha256":"a8355cb5356a332a31bb2b80546910bc4384ada3fdff05e604c83601645d288d","sha512":"3d8f1a1506c4a108b5bad04c7fba7032d1baf11ebd14c7ddee925f3c0073228f8a0adf64a528ea9bc57ac17fb4fc88e9814b472aa238948407404199cf60ca1e","ssdeep":"","tlshash":"5571c5a53621fab166f044c65c7ed582f229313b112fecf0a707d8b9a424ad10562ff3","first_seen":"2026-05-11T20:53:12.158005Z","last_seen":"2026-05-11T20:55:52.862914Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/493-fb9a011a516e74e4.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/chunks/493-fb9a011a516e74e4.js HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TU%2FLP09e5EAei7ULBBMIYWN4tTsRkFUZdQSbEtQ%2B4NDgBBN7Frmy%2Bp%2B8H1JByBOWgVcBDr80LL9h9MKe31apqJqS252grcMNCnWvii3obNl%2FNRRIsN4%2BovnPtQU2zXUm\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-2a743\"\r\ncf-ray: 9fa415a50fccc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96e61fc91791d3c8d1344c7991f1c16c","sha1":"e244327ffe3f6566c8d78bb27458c03d3a074491","sha256":"696cb8fbb0a02f04c5f60bc95674e4a7a92dc0bfef9d1c290b475dd7beb1187a","sha512":"75fd78549fbf2a0998529b019c025e43b06c72347558202f575c2dea10289b27eaa55c2ee998c5e940c7caeaa8026c99b894165a3319725e8a810b4c1e97fec3","ssdeep":"1536:0zigN+KcB/cO5HYHqLVcXl7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNwrky/Sz:u7MtmA+Vy4r904Aj44RNsz/Sz","tlshash":"3704d9b676d0f8e107a780e5843b400af3291c37146f74a0a3e6dcd975645dea1b3faa","first_seen":"2026-05-10T13:09:49.334066Z","last_seen":"2026-06-11T21:52:43.598905Z","times_seen":30,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapp-tw.com/_next/static/chunks/app/layout-e0eedcfbd9832d31.js","fqdn":"webapp-tw.com","domain":"webapp-tw.com","tld":"com"},"ip":{"addr":"172.67.140.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webapp-tw.com/","date":"2026-05-11T20:55:26.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapp-tw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 14:36:24 GMT","end":"Mon, 20 Jul 2026 14:36:23 GMT"},"fingerprint":{"sha1":"48:E2:EA:BD:79:6D:92:12:FB:78:D7:39:5F:05:D0:D9:A9:95:DB:A8","sha256":"A7:B6:C8:6F:43:F2:FA:E4:4B:6F:B5:C3:81:5B:26:A2:86:F7:B0:C9:02:D6:5A:92:5B:BE:AE:DB:25:C8:75:EC"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-e0eedcfbd9832d31.js HTTP/1.1\r\nHost: webapp-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webapp-tw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 20:55:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHSiSs5DV9j1o3NNzWVH2lGvviieues7FA%2BeDbAzo50oZ%2FLFFuM%2BKDVTq%2BbdIYFBOnWYi7oPsQeo89zfQxBISUVP4dsrZYdMMCdYauYgyWh6kgdDbZk0Xbp7%2FBX9Lax7\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 11 May 2026 10:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 11 May 2027 20:52:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 161\r\ncf-cache-status: HIT\r\netag: W/\"6a01b0fc-1cb4\"\r\ncf-ray: 9fa415a50fcfc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7348), with no line terminators","md5":"21eaac2c1cb5491606f788a3b93bf2a5","sha1":"4ced2c99906741817633781862f7e5725e8cb54d","sha256":"7a61c89a07b8c97d095326db0d84327b3f948f387af8396d96ed8d5e5884429e","sha512":"a416a7718968358f2620584fcb93b33a80e7c317f5afa8c87c0e13306c338b3644608f2d7b3a637dcd95f4b261d07a5e919ce26336a3fc5c537b149616d89819","ssdeep":"192:D39uc5jz6noBDLpjD3dnz9I9eJja6rWkWVxCq16:D3jj4SjKuIkWW","tlshash":"99e10bb23681fc3546a68480e837c6c2ba151d35241fb8d0f7bacced3664e88d4a1f65","first_seen":"2026-05-11T20:53:12.155275Z","last_seen":"2026-05-11T20:55:52.865318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapp-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
