{"report_id":"cb0cf8b0-cae0-4e4c-9af1-f2595d0d1b09","version":6,"status":"done","tags":[],"date":"2026-02-14T02:51:40Z","url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"title":"Free, unlimited VPN for Windows | Proton VPN","dom":{"size":327530,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3008)","md5":"5d38555d6c9b5b6a059056b89bf2195d","sha1":"31484070db00934abb8bfb24ca348da4c993e67a","sha256":"3da493213e3caaae5161107626b66d874b76639a859cab83a95eb25da6c27bf6","sha512":"6cca02f439f931be1c6136b66bb284bfd1673327c66f0a7e71330c9fd1092bcd8fdb775ceba0f4ef4ce0ae7cf0d725c9c2e881f5f688d44e749879ff1c893fc8","ssdeep":"1536:kUkUwMC40RvuVIqVU/gEVB0iDz6GESjIr663T0t/HfdxN8/lXrW2a9g9Bcs0JlfP:kUkUwMJzSjKS/a/gg9Bcs0DfLFf7Rr","tlshash":"f064c41444f1107a109791a9fb72b725fb9be317c91ae7c971bc43902f83d99da83b88","dom_hash":"domhashd9dba90d77b95d32d13047438ef8ef56","first_seen":"2026-02-12T19:52:10.740685Z","last_seen":"2026-02-14T02:51:43.438215Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:51:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-08T22:30:41.935977Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"get-proton-vpn.com","ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-02-12T19:52:05.447558Z","last_seen":"2026-02-12T19:52:05.447558Z","alert_count":28,"request_count":14,"received_data":1345455,"sent_data":6610,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9363f69a26be5b9db45012270e2c0d4e","sha1":"7ae1fba7c89c1b00c4fb1d877933181b930b27c6","sha256":"75b77ac09d02eb3245977946c1b03812d80d295ba1829d6f24686a786b4fb74b","sha512":"3218a71e5f1154b771354675b8c50a0a2f6bc42e6f3fe5a0092569466ca860832d88a7e168071f04fbe8a302e71111e07186de77bae62e8ee9c1794bef29d69e","ssdeep":"","tlshash":"0dd012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":240,"data":"","first_seen":"2026-02-12T19:52:10.755579Z","last_seen":"2026-02-14T02:51:43.453659Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"722d6f241daff0e0035ba1ed544a9a66","sha1":"7cd4046648bbc23da0196319cb8eac1146311282","sha256":"2e07bd5e074bf77a503b3f9d6a2a97cc9188a67f7f232fe4b233492f0c5c723c","sha512":"bdaea5bab4f2b195c94809e7c484f1fbb488dce1c0026a2c3b472fb1f054fd1d443d8b2552ff2aa73fa0912b23a64dbd10169a4a671786a6197f25d8ec470eeb","ssdeep":"","tlshash":"c7d012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":256,"data":"","first_seen":"2026-02-12T19:52:10.756361Z","last_seen":"2026-02-14T02:51:43.454553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"722d6f241daff0e0035ba1ed544a9a66","sha1":"7cd4046648bbc23da0196319cb8eac1146311282","sha256":"2e07bd5e074bf77a503b3f9d6a2a97cc9188a67f7f232fe4b233492f0c5c723c","sha512":"bdaea5bab4f2b195c94809e7c484f1fbb488dce1c0026a2c3b472fb1f054fd1d443d8b2552ff2aa73fa0912b23a64dbd10169a4a671786a6197f25d8ec470eeb","ssdeep":"","tlshash":"c7d012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":256,"data":"","first_seen":"2026-02-12T19:52:10.756361Z","last_seen":"2026-02-14T02:51:43.454553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c990a333d9e3f714ae874c2fc65a369","sha1":"56a774a57945bde3471a73781b1c87b32fcaac51","sha256":"58ce153b64f4328bc4fb93227ce1558639609f1e86195cac57b51de6deb551d4","sha512":"efe783f5258d828ae6f1793079385d820d0c58bb3d868a17f76fa2ff0f7a7c449ff61c45a3d260bd5ffcc6d2d958a4b7eecc7f5575e098fda0f48b3644e3fb14","ssdeep":"","tlshash":"37f02b1e11696534d183101d9a1bb914f22362775605d5c87d1d87003f31b5c66c5f98","size":563,"data":"","first_seen":"2026-02-12T19:52:10.757088Z","last_seen":"2026-02-14T02:51:43.455403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36c489ed265ee436edd80605909afea5","sha1":"4df9b60ce18ff288be8f2ecc88c78f92560770ce","sha256":"20d08811c2f101f9c9d8dd1e8b078832ae50af465af12889ce456bf1cdb9e4bd","sha512":"cdfb71366af25d58490b3a370ce753b03c787a9de72237bc9a4d7c8c5ff24ac1a51b0caff8bd4cfa7c8a4161b582f6b0c4418f0430be027cffb5d31c6f47dd1a","ssdeep":"","tlshash":"80112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":882,"data":"","first_seen":"2026-02-12T19:52:10.758132Z","last_seen":"2026-02-14T02:51:43.4562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36c489ed265ee436edd80605909afea5","sha1":"4df9b60ce18ff288be8f2ecc88c78f92560770ce","sha256":"20d08811c2f101f9c9d8dd1e8b078832ae50af465af12889ce456bf1cdb9e4bd","sha512":"cdfb71366af25d58490b3a370ce753b03c787a9de72237bc9a4d7c8c5ff24ac1a51b0caff8bd4cfa7c8a4161b582f6b0c4418f0430be027cffb5d31c6f47dd1a","ssdeep":"","tlshash":"80112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":882,"data":"","first_seen":"2026-02-12T19:52:10.758132Z","last_seen":"2026-02-14T02:51:43.4562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36c489ed265ee436edd80605909afea5","sha1":"4df9b60ce18ff288be8f2ecc88c78f92560770ce","sha256":"20d08811c2f101f9c9d8dd1e8b078832ae50af465af12889ce456bf1cdb9e4bd","sha512":"cdfb71366af25d58490b3a370ce753b03c787a9de72237bc9a4d7c8c5ff24ac1a51b0caff8bd4cfa7c8a4161b582f6b0c4418f0430be027cffb5d31c6f47dd1a","ssdeep":"","tlshash":"80112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":882,"data":"","first_seen":"2026-02-12T19:52:10.758132Z","last_seen":"2026-02-14T02:51:43.4562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36c489ed265ee436edd80605909afea5","sha1":"4df9b60ce18ff288be8f2ecc88c78f92560770ce","sha256":"20d08811c2f101f9c9d8dd1e8b078832ae50af465af12889ce456bf1cdb9e4bd","sha512":"cdfb71366af25d58490b3a370ce753b03c787a9de72237bc9a4d7c8c5ff24ac1a51b0caff8bd4cfa7c8a4161b582f6b0c4418f0430be027cffb5d31c6f47dd1a","ssdeep":"","tlshash":"80112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":882,"data":"","first_seen":"2026-02-12T19:52:10.758132Z","last_seen":"2026-02-14T02:51:43.4562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d887a6ffbac782d9e2ef366903534470","sha1":"8d978e433f55e63ec10a5906106bafe1d76ead61","sha256":"b595800cbd24d4b2f2bd69e702a7dd80ec1ee33d77474662eae47ed2723bc0a6","sha512":"62052c89bd1faf539f8482f15e5242fc135192759778ec2803911430940ba1219c1c69525911c585b752b4080dc456e47a6102510e8df8cb10316cb1f2130892","ssdeep":"","tlshash":"de112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":922,"data":"","first_seen":"2026-02-12T19:52:10.758904Z","last_seen":"2026-02-14T02:51:43.457283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566b8143aaef04a91c696b8b7b328ed","sha1":"f1e6cdcb947eaaf364485b34e2e8a0207addb561","sha256":"23a49d94a90bc9308edcde5f6bd9257afbf6c91147c5061cc5a9bbcdae9c1f98","sha512":"ab827560b10598b334fecc06c7782a3d7dad4955af7b8a334cd8b7b384bb414a6126d5e56b3418f5b1320e7738d8a5839e158993db6a51b5e6f4bac4f4cae212","ssdeep":"","tlshash":"56112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":962,"data":"","first_seen":"2026-02-12T19:52:10.759735Z","last_seen":"2026-02-14T02:51:43.458146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09132079d7f2111112b396e92adaaa88","sha1":"e408022f7eca5c3fd2c7a44e06512d302e0512bd","sha256":"ccbe696cabfc95e80d3e9f92293f1bdc91249e7bc59d27fe678fe75d00ed8eb5","sha512":"79a045a149f93b0c7f0a81e8d039e0a8ec5f61899751b39a0f6c1056120ba29e53ab3f222e151ff10cc483e349a7cad394c515d254ab83464422850d73024ae7","ssdeep":"","tlshash":"62012b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":842,"data":"","first_seen":"2026-02-12T19:52:10.766711Z","last_seen":"2026-02-14T02:51:43.459008Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d887a6ffbac782d9e2ef366903534470","sha1":"8d978e433f55e63ec10a5906106bafe1d76ead61","sha256":"b595800cbd24d4b2f2bd69e702a7dd80ec1ee33d77474662eae47ed2723bc0a6","sha512":"62052c89bd1faf539f8482f15e5242fc135192759778ec2803911430940ba1219c1c69525911c585b752b4080dc456e47a6102510e8df8cb10316cb1f2130892","ssdeep":"","tlshash":"de112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":922,"data":"","first_seen":"2026-02-12T19:52:10.758904Z","last_seen":"2026-02-14T02:51:43.457283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d887a6ffbac782d9e2ef366903534470","sha1":"8d978e433f55e63ec10a5906106bafe1d76ead61","sha256":"b595800cbd24d4b2f2bd69e702a7dd80ec1ee33d77474662eae47ed2723bc0a6","sha512":"62052c89bd1faf539f8482f15e5242fc135192759778ec2803911430940ba1219c1c69525911c585b752b4080dc456e47a6102510e8df8cb10316cb1f2130892","ssdeep":"","tlshash":"de112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":922,"data":"","first_seen":"2026-02-12T19:52:10.758904Z","last_seen":"2026-02-14T02:51:43.457283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d887a6ffbac782d9e2ef366903534470","sha1":"8d978e433f55e63ec10a5906106bafe1d76ead61","sha256":"b595800cbd24d4b2f2bd69e702a7dd80ec1ee33d77474662eae47ed2723bc0a6","sha512":"62052c89bd1faf539f8482f15e5242fc135192759778ec2803911430940ba1219c1c69525911c585b752b4080dc456e47a6102510e8df8cb10316cb1f2130892","ssdeep":"","tlshash":"de112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":922,"data":"","first_seen":"2026-02-12T19:52:10.758904Z","last_seen":"2026-02-14T02:51:43.457283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d887a6ffbac782d9e2ef366903534470","sha1":"8d978e433f55e63ec10a5906106bafe1d76ead61","sha256":"b595800cbd24d4b2f2bd69e702a7dd80ec1ee33d77474662eae47ed2723bc0a6","sha512":"62052c89bd1faf539f8482f15e5242fc135192759778ec2803911430940ba1219c1c69525911c585b752b4080dc456e47a6102510e8df8cb10316cb1f2130892","ssdeep":"","tlshash":"de112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":922,"data":"","first_seen":"2026-02-12T19:52:10.758904Z","last_seen":"2026-02-14T02:51:43.457283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d887a6ffbac782d9e2ef366903534470","sha1":"8d978e433f55e63ec10a5906106bafe1d76ead61","sha256":"b595800cbd24d4b2f2bd69e702a7dd80ec1ee33d77474662eae47ed2723bc0a6","sha512":"62052c89bd1faf539f8482f15e5242fc135192759778ec2803911430940ba1219c1c69525911c585b752b4080dc456e47a6102510e8df8cb10316cb1f2130892","ssdeep":"","tlshash":"de112b0e11696834d183102d9a5fb814f23362272205d5c87d1c87442f35b5c62c5f88","size":922,"data":"","first_seen":"2026-02-12T19:52:10.758904Z","last_seen":"2026-02-14T02:51:43.457283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4159c543e7928570ca9f7133fdc3037","sha1":"1f968e4aef113f9d974ff7e8dc84bc0f9e0e7495","sha256":"6510937e484980d4240837bc449f000e89aeefc3c068c96951828831eddccde2","sha512":"3418094788dc740b307e77bab984281db43fd9919852c7d69994e78d140ee97897d8bb5fac548bcc694de93cb0f88c57b22953cb2fd59ac34559458bd19d5708","ssdeep":"","tlshash":"6bf012292a81483b849761193daf96683aaa25462060d300382cce482f219a486a478c","size":480,"data":"","first_seen":"2026-02-12T19:52:10.767599Z","last_seen":"2026-02-14T02:51:43.459828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"get-proton-vpn.com/js/script.js?v=3","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /js/script.js?v=3 HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2B3HWio%2F6Fp9oXck%2BwhDCLIYv7QbDwzBSZIaKKK7d%2FzPA%2FBbgvEFCKhJffqma07AF8q4t1Oy9h1V70ozyngGgXUkb%2BcgcDyruXFEABli38ldgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2fb11c1f36cf74b6b7b27607d2c51beb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b9ff08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3746,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"378a3a0afdfdfcde2cec9e572f96d737","sha1":"071058ea08ade6dcdb90b9e9e87d4d6cfc739049","sha256":"24d2464f94b8d594fa1e597e413d178ec5527b19b4092c034b972a93c8260402","sha512":"a7a11035542bad534ca6d4c0af467938cedfe7e1fefeed7ede8fc2ca617d94ff323600228d964a8e099f85f00940f806610dddb82b461a70d0b8739637ab6f42","ssdeep":"","tlshash":"eb71126732f6347508af24fa9b2f6644762100d7740aec647e6cc7500fa1b912eb6af6","first_seen":"2026-02-12T19:52:10.750882Z","last_seen":"2026-02-14T02:51:43.439762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/image-transformation/hero_free_vpn_download_forwindows_desktop_1cead11e84_1505x988.png","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:18.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /image-transformation/hero_free_vpn_download_forwindows_desktop_1cead11e84_1505x988.png HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 198514\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"84c089dcebe3efd161b90ee8e5ba7c97\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3GNngW132dOrCsiiN6BgFUZVnU9fF7jKuEVovKdJUd1HKgbt4XvWRswrxdaX75IlbbSKmSQmWxT8F2U1RSsNl1FUCil7d7ggx5v8dYqMhr4QuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 02:51:18 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9434e48468be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1505 x 987, 8-bit colormap, non-interlaced","md5":"55ad6d754a5fabb43b749e99c894acd9","sha1":"d3ae70a4886484f4c409aced7f25ca544dbfc3c6","sha256":"a183ccfe66d6bb7a48b5614efebb871cad60e2701ba92b7251d3467658ec2892","sha512":"cc87b2839e5ab2154be48ed9d42386941279b6167dbb58598924853b44231cfac1c827b77831e146896a8d9995b20debbfc157f32f5b89fe814e8658ec6b739b","ssdeep":"3072:pxmXQTHY8zBjrDKSwZryjyqtBiZv3eBNUjwiPjbyO6dMy4K/nuW8iXzwCcWgOi3G:pxO8zFr/3yqtCGVzdHGFCbg/P+","tlshash":"1b1423956172df1e3ae779a17ec54394bc0533ae766d0a4ef48af8ad2083184706f7c8","first_seen":"2026-02-12T19:52:10.746667Z","last_seen":"2026-02-14T02:51:43.440839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/cdn-cgi/rum?","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:18.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\ncontent-type: application/json\r\nContent-Length: 1017\r\nOrigin: https://get-proton-vpn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1017,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":611,\"startTime\":1771037477305,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"4d54194e-43c8-42ad-bc2b-79e60c56d67a\",\"location\":\"https://get-proton-vpn.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":744,\"domContentLoadedEventStart\":775,\"domContentLoadedEventEnd\":780,\"domComplete\":827,\"loadEventStart\":827,\"loadEventEnd\":827,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":1,\"domainLookupStart\":10,\"domainLookupEnd\":25,\"connectStart\":25,\"connectEnd\":42,\"secureConnectionStart\":28,\"requestStart\":42,\"responseStart\":239,\"responseEnd\":242,\"transferSize\":29385,\"encodedBodySize\":28559,\"decodedBodySize\":327686,\"name\":\"https://get-proton-vpn.com/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":827},\"siteToken\":\"d67548cb459945ec9e80d65e1144d7a5\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://get-proton-vpn.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyGuARJMh7%2BCfWWxPOeREH%2FRob1X0U0Ji71heE%2B2%2B0XVXX%2Ffbgkqij6J0N%2FLjy6KbTbS3oLMAMcU8qkSR1RRGgcUqjJ%2FuToSKF8bZEn834eYng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 02:51:18 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd9434ed8558be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/css/font.css","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /css/font.css HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7XWfZ5n%2F%2FLIQkmHu8T8BtUXMh4oKich6K9XqUmhrGBCDNiL4JUN5qCNRqu5OWavfYbTNu8Gdd0CDliLv4KmRrWvtSMfmJAdFN%2B8Jj0Sv7K9VQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"911272d2d55da50ddc84e90ef8e5886c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b8fe08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":662,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"71deec163aca5f0a3abc9fb39835bb84","sha1":"09bc4a1ae352d14fd0ee2380444916c71cf22144","sha256":"50fc0b63afe6f9c8ac03c6fa69618a12f610aed033be34ef37420cb2adb62db6","sha512":"8406291bef8a5bd0fc5e620a20cfef49eb9594e4ba05bba968bb7882f28c0f7474df5493887b9ce52f59773122935b6fd2d777ad15b0aed65fa771f1d0f58d45","ssdeep":"","tlshash":"a90128000e5fb544b8615d8f339f2a267d4d4087308ad1253bb636599fdf66dc3a0b6e","first_seen":"2026-02-12T19:52:10.747732Z","last_seen":"2026-02-14T02:51:43.44288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/image-transformation/proton-black_zvq72v.svg","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /image-transformation/proton-black_zvq72v.svg HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpMpes994kiBusQky87c9VYMA0vLp%2FWeJLrUUBohFNp4I%2FXf7skosEtXdAhUu%2BB5tbc8YPk2Dp7YVb6T0d6lwDwIw2lAgNV6%2FsFUOLhaD1soBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4cab1d9fed5fe6ab220dc73cb6e31fe4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b9fe38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3be5b90c5b73bc2814690d2dacb60b1a","sha1":"a818cf7956fa3304fbcc60a8b9b3f5b3d5e2d875","sha256":"c27f789dd67f63cc0c3ca5c9f232e1757125e48fd93e74bd46b7971e004a1823","sha512":"8f7a8a27f8aa678ed718bff64965cbca87313a167470941c7ef00557def8e088d6e43404ed5009b8972b27f3188d842b3ad86a2b7a37bfafb761d75b6ab6c9dc","ssdeep":"","tlshash":"fb5185d492a8f5a49147bf74d729b06a77123dfd3311c384d2905e77a16329f8d84c88","first_seen":"2024-07-08T09:14:50Z","last_seen":"2026-04-24T04:32:12.697982Z","times_seen":8,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/image-transformation/vpn-purple_afexu9.svg","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /image-transformation/vpn-purple_afexu9.svg HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KHmuRDM9PJDMtTvnZimGKDdOSHgBmxw2g1Y1xhqtQY5h6kI3J8SEhkICnHGjKw4dQItVyycK6Pw7NQI9OuDBPuM%2BWYEjj1EU1HILLfcEDZJjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f9916043f8c5c0ee33d6a3ec5ccad084\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b9fe48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb67982b593abc29835b310fa3749541","sha1":"bae6f6ae567f4771f1bbc31ece37e11dcd17866e","sha256":"7f7675eb50619ba8a170a6c48e7fc5351801f5fe7fdf6d2c3ee0abe299173386","sha512":"48d107eacabea94b7148f5568fa898888bb5028ba6412865864fc574711ab61b1d1084fe90011709c47f081fc1562a994566c4ef64cbbc60474db13c355001d0","ssdeep":"","tlshash":"983195c675f850f4ea85672ccf3b1023698b38b63b4a99a0c2b03555d04cd2ae9e4de9","first_seen":"2024-08-19T17:38:38.745689Z","last_seen":"2026-04-24T04:32:12.662203Z","times_seen":7,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/favicon.ico","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:18.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 02:51:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ff4u9xkKA%2FQB%2Fjrc4J3Vpzkhoz%2FyY%2BpheYCTTooxjbcfoRdPYvf7a1QJgnGFYwJWZVtwg50favMcODCeEeXfpAQBmlsKeLmyvMNtzwegyqrGkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncf-ray: 9cd9434ee8578be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327182,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3008)","md5":"d2a35247af9dd078ffc5aab7a2e6f3c9","sha1":"80ecf268f4b9f79add079e2796b9d5636865e7e7","sha256":"eae1bdf1683145f2c4072eb0a89924cbec8fea145577d85ae305cf67a55c5340","sha512":"9b362b7c6a2728e45ad518efe27ba9168cc29e09827c80757c915ae6431af3a1248d1cb41f22f055e91b7a0191a8ad44541d46bc587165440e932efd0b089d1d","ssdeep":"1536:5UkUwMC4URvuVIqVU/gEfB0iDz6GESjIr663T0t/HfdxN8/lXrW2a9gpng4K1lf2:5UkUwM7TSjKS/a/ggpng4KPfLFfaz","tlshash":"4e64c41440f1107a109791a9fb72b725fb9be317c91ae7c975bc43902f83d99da83b88","first_seen":"2026-02-14T02:51:43.445653Z","last_seen":"2026-02-14T02:51:43.445653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:51:17.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOkhd%2BNPynT85M3jLw3cHu2M9eFxvmVg20vaJKabuN90%2BHRfV7IREkwUHdRvdtQn00%2Bs6BlRxCZMq7XJE0JJX8mDqANT%2Fob8wOycZEUa5AschA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=180\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd943496970120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":327686,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3008)","md5":"7d577b56968e467a47521ea3b33c0e6d","sha1":"3eb4fbf4fea3853d636ed8929f8599dd0829d553","sha256":"c1689f4db80cec7a511cf15010cdc5749527b363e6fb46429a1de400afd972ca","sha512":"7a4f6ee025544ef24b0b5adf61b59abc2d9ea441ec4671cf3d024edc52971fdbca89e8b0b51e190cc5037eb9cd3bbe7246afd2b6ffa19599527db08d5eecfe6a","ssdeep":"1536:5UkUwMC4URvuVIqVU/gEfB0iDz6GESjIr663T0t/HfdxN8/lXrW2a9gpng4K1lfb:5UkUwM7TSjKS/a/ggpng4KPfLFfnEe","tlshash":"6964c41440f1107a109791a9fb72b725fb9be317c91ae7c975bc83902f83d99da83b48","first_seen":"2026-02-14T02:51:43.446574Z","last_seen":"2026-02-14T02:51:43.446574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":27,"dns":14,"connect":1,"send":0,"wait":197,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/image-transformation/simple-login_cozggp.svg","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /image-transformation/simple-login_cozggp.svg HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gdq4%2FGXJhQPY04KliMDdS5fsXHZf8trlW3Gr4Z2mOuwt2ET9g1b%2Fb8ICANHokC8l72UeXFrOGZG%2Foksynd%2BBsf0QgvHV2aEbZTjYs%2FK61hdpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"861c957780efd21cf084f1e94d7aa4dc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b9fe58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2a2589f3280b7a3c3d8e4433ed0fa5d","sha1":"fafd174b590b87f51d2d6f9e29555dd12b4866a3","sha256":"26d7808cf6c10b0c2af7fe651dca3e950ed834729debba763edeca5c4b4ffbfa","sha512":"2090284f451f98d54a4abb351e76c4b7c05b138e7590221567b12fae25e6dab46fda42cc3f5b43811b8694157098e8d1f10cf5797b2168196c32ed8c7c681d1b","ssdeep":"","tlshash":"092153bdd188e39c49468f2cdf294062230f707f7a41d2d4989f937ce60a4c5d9039b8","first_seen":"2025-08-04T06:48:43.451304Z","last_seen":"2026-02-14T02:51:43.447603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/image-transformation/standard-notes_h81doh.svg","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /image-transformation/standard-notes_h81doh.svg HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5tmWRCTPN7W8PO90vHWGXhAsRTS6a5mpXq5zpYY9%2FBIbrmykvSN4R2Bf8O5VblZ%2BoN47pOW9MW1zDz1Ktg%2FkFnQrEiZ67WxLBzwbN%2B3LSwifA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"03c569f0019acabd67a0c74d1ce530a9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b9fe68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb787d05a5b668c3455bade3fc13d8ac","sha1":"5e619745a37f9e3bb0c6193975dbe6cccbaacd86","sha256":"63e8499322531985798f517f3164443a9e9bcad540d707eced720f1a4c8a12b8","sha512":"dce2aaa933a7b55ff8ec7b328f8b5dd2438c683980e4141ca0a060df5ee39a10238e80286a56c1fda7c740d60e70bf69cee753eb93b07c7ea0d8bc559d815f03","ssdeep":"","tlshash":"7101d037d6ddab33e0648714dd108838372f81a76284c160b2adab5e6b246c12c4f6f4","first_seen":"2025-08-04T06:48:43.384593Z","last_seen":"2026-02-14T02:51:43.449019Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/fonts/inter/InterVariable.ru.woff2","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /fonts/inter/InterVariable.ru.woff2 HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://get-proton-vpn.com/css/font.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 56836\r\ncf-cache-status: MISS\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"45fcfd8b3e1ffa824413f28504f31397\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2VRPvnr2lFSxQUEh2a8Zk0k2qdJSNhafrwvLQCB9atglaOWmuKQGjHU8Wxm8d%2F3JH2MmDm%2FgjH7fZcLuT%2BvzMCf1s8FYMhlUaeiLG57Bq4TGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9434cc8138be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56836, version 4.0","md5":"7112b9460d1b5da41bde36912018fcd3","sha1":"af5ee70424aba29b2b9e078efca6c9b4a7d09563","sha256":"75dd9da426f0b804f1cf39a12b96a4acbdf281e96fd6b923747392c8c8295870","sha512":"de3649032fbcd62e2c3a4f90c0977f005ce28b68cca90b256c2dfe34f0a451502c7a386a01ccf771705b2de3a90c53b0a3b2dd047fe899387dcc51160520a24f","ssdeep":"1536:rtI2+Z2EThux6R86RqLker1J73IBYjgmrgc:rr+ZtMIRxer1J7nvrv","tlshash":"a543020a30d88039e6f753d58b31e77f2243925006660e816aff95dd1de284b3be9393","first_seen":"2026-02-12T19:52:10.745717Z","last_seen":"2026-02-14T02:51:43.450046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/css/style.css","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ep%2FG8qlmWEWu3XA6xjUnT8zNvpzAOutGWI0L6gjqCff1Kz7ELWaEvUjnujK6ekVhBPPpCrIz4a%2FQ9AyQvZ5YjlEsqwUwpyVzQy6Fe8ygq4U68g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a00d8386c170d26e26b47f08c8d307dc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b8fe18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411159,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (404)","md5":"609373ec0734c074acb7ff0dc0897c78","sha1":"dce002d859ceef8f43bbc7a7d03adf1e23b3f153","sha256":"e09191c0997da3bcfddc95ded4c8c71906850c0f348bc6541ee621b1c1ace636","sha512":"a1a96c61a02e4aa09c0233fba689d39d93e9d6def8af3dd9f6169f58cbae51ad61a5c8668cca2d62bee33e32b289e54e51449a46ff82b3d158aaec4231e0475f","ssdeep":"1536:iKpnU7bj6qx4P39kf6FtdH+OMgujlM2ncr7bwG99QWiqVhrT4hVkQqOMTZ2rbVZV:jwR4A55D/","tlshash":"7e941235b2f901b27c26e6f9e59cb58d7a3dd286cd1e8e66f9d801308be43f14d92214","first_seen":"2026-02-12T19:52:10.742221Z","last_seen":"2026-02-14T02:51:43.450965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nOrigin: https://get-proton-vpn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd9434bbc23783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-10T05:01:35.80685Z","times_seen":337643,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":3,"dns":0,"connect":1,"send":0,"wait":8,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/image-transformation/vpn_f9embt.svg","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /image-transformation/vpn_f9embt.svg HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FSokIGWlbjrkxqZOTNhSAQtCEzcV35EF7G3%2F2lxKxk2CEQ3X6sK5kuW54sbzcYJZTXLBIjiBdhXtgL8kE5rrqRiC%2BfWL2YjLUgP3X5irFLmtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e1f5eabe8ee460e45df19dbf70fadb69\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9434b9fe28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3237baf0809dc310a9e7592ea2fe7e9","sha1":"cd3d71f36a313ad6b392b637ce92a932cd29f2f1","sha256":"31db1daa92ffb30d65e2d3b5fa22ace61dd0a32d0de8554d50fdf1755ce97d93","sha512":"56c83ba2d376fb187b07188cdbee1a9256c6be7b51443c72646bfc7c22567c30719dcaee2590e197e886b84b6d7b6f38fc516aad8077eef3f54258e3560b7ead","ssdeep":"","tlshash":"ca21517aa268d8a6f449c36cc25dd430319ea963a841c1d0d1e0ff0e49b81863c4dfdb","first_seen":"2024-04-02T15:56:46Z","last_seen":"2026-05-31T22:57:38.966111Z","times_seen":12,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-proton-vpn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"get-proton-vpn.com","domain":"get-proton-vpn.com","tld":"com"},"ip":{"addr":"104.21.93.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-proton-vpn.com/","date":"2026-02-14T02:51:17.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-proton-vpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:11:44 GMT","end":"Wed, 08 Apr 2026 00:11:42 GMT"},"fingerprint":{"sha1":"64:AF:56:DC:5D:04:2D:AF:88:A8:DB:26:F7:F8:B6:DD:0B:60:04:1D","sha256":"BC:B5:53:00:C5:A8:17:33:95:77:B5:54:27:43:D4:5E:51:1E:04:2B:D1:79:96:78:FF:45:70:B1:01:17:63:55"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: get-proton-vpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-proton-vpn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 14 Feb 2026 03:39:17 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpffynODGFnvvl7UzPkLkym9CvHzzwi25a8EaXenjkl3IAawmU22I%2FImE4c5HAhALt2ktF%2FxgqkCIOg5hND1ovtP0hVcM3QCBM71cEW5dYRj5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:17 GMT\r\ncf-ray: 9cd9434b9fef8be6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T22:56:56.816967Z","times_seen":418258,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-proton-vpn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}