{"report_id":"cd793cbc-210f-4e3c-be2c-39c03b9d384f","version":0,"status":"done","tags":[],"date":"2026-07-12T22:21:56Z","url":{"schema":"http","addr":"windirstat.dev","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"windirstat.dev/","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"title":"WinDirStat — Windows disk analyzer \u0026 storage mapper (GPLv2)","dom":{"size":12702,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1261)","md5":"1a3ecb17726f284c0bcb285b12a24a05","sha1":"364de31aadec2df96b9997ddbef3d1219c64874e","sha256":"aa86149ff2fa828f491569f4f78838149a758cda24336f36b3ed51b23fa796a9","sha512":"8480030f3f64f4220e00016ef6148d662e31f02a1e7b4af3e2b1e965c2370679d09ebd153b18575f1a80a22084e500a1afbe98b121df32f93e876c725704527d","ssdeep":"384:hRS3aIYY0q/JkTWmX27tNQBVQN++cUR+AYahzh:RYeacUR+AYaxh","tlshash":"1b429923dcd08c365e1242cae5e67a9de763c007e9a93940f6ed051f0f92edac973259","dom_hash":"domhash550fd0df982f9bf830e70d3bd9baf883","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"windirstat.dev","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:21:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"windirstat.dev","ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T12:44:41.856893Z","last_seen":"2026-07-10T12:44:41.856893Z","alert_count":7,"request_count":7,"received_data":138682,"sent_data":3433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":1,"received_data":486257,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.clarity.ms","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-04-03","domain_rank":4064,"first_seen":"2018-08-22T07:41:57Z","last_seen":"2026-07-09T02:17:14.716001Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-07-09T13:03:49.640077Z","alert_count":0,"request_count":1,"received_data":838,"sent_data":965,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"windirstat.dev/","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51b442ad530158e0b15aa4645537fcbd","sha1":"2471554a7976bda8ed56f4da50104fccd91d48ba","sha256":"51c47f9497256f21f8d2262ec1d66b1b54c020422783ba8c5035faf80064a1d2","sha512":"b934870bb702b2efe72f883704938004a9034870f87214e1eb5340931ba5626f1dce828c90e0991f02a4599e9e5e64e1b1135bb7c5e9979e09ad8e9ec791e9b1","ssdeep":"","tlshash":"19c02b8c220b0c7151f72f010b7fb200b195320294d06933290b330c4f30d13db84814","size":155,"data":"","first_seen":"2026-07-10T12:44:45.659296Z","last_seen":"2026-07-12T22:21:57.922877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/media/direct-download.js","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dabfae0e5cda4499c19ef94469ad76b","sha1":"7e2dda1a376137def89c16b03b35ae52043899ef","sha256":"6647e1ce4aec399a91820ee6ef61a4383705ea2e25b048b61be7f7b87d224c30","sha512":"d1a20a7390db5d04e145a48f9985180576581a17e2cdcba381b3f17c5f7cdc81680c5177a1b7fc13c5c8b3ba9f1ad3b67ac21d558730097bc56f09eb1afb3cc9","ssdeep":"","tlshash":"d4f0dc4b34c2521c4e7263b0c78f0d0ed7269337082d8230b8d1e965beb06201aabcef","size":474,"data":"","first_seen":"2026-07-10T12:44:45.654886Z","last_seen":"2026-07-12T22:21:57.916567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-87EMMNSRZ2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28edc4d493d05bb1196a6cbeea39f341","sha1":"95521bd64f046b6989e55df0dc336c58f614d3c4","sha256":"296c90e1020abe6490a134f7d2c9cf7db2b2c07e592be848087d5ebdeb871244","sha512":"e7e5db94ec27cee0173a23259e043a76fab874f35f11bb3232f9f7640ca2b8f90e43ec6745815114acb196a0cc8028727be95059750eb9969db72f88e400c539","ssdeep":"6144:x+p5o0JeYuozbF3Vb25pvMlci0SJGWox3lytZDP3OfAn8l:spIYnFB2j4DmfA8l","tlshash":"54a4f9cdb3d674625396f478903f018ba57b28e2b44cc899b189cce42e7465a8277f7c","size":485653,"data":"","first_seen":"2026-07-12T22:21:57.920691Z","last_seen":"2026-07-12T22:21:57.920691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"windirstat.dev/","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:21:20.015Z","timestamp":1783894880015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:20 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 30 Jun 2026 19:20:02 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uF%2F4DCaAdSqEUs38JCkMv6qOt%2Byb1U0M3ujQcapUc5Tq9pU50xV0z1Frda3QTB%2BzSwzWNoIB0B6u0zzeQ1rlNXJyG42%2Fvytdx3HIeh8L6%2B7ANQd2Sj%2B5crqFbt%2FlPJURgg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a370b86b540731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":12520,"size_decoded":4916,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1261)","md5":"12de79783ece17d710c2e5f1ba7288a9","sha1":"18ce1405ac087f583ee602e38a992be3ee7f315c","sha256":"9966150f3d66d18237eade2d4065c060430b4504176e21dee701dd3f358b40f3","sha512":"6f5bec7e0d6533467ea4ee8e5aea39c6786ea33c64cbcdca56b15922f776c50f8d5a6ce8e16c2eea7206f8db52d0612ebc73af4c655e218bfa88f2e169d8661a","ssdeep":"384:PRV3aIiYF/JBTWmX27tNQBsQN++FdAYahzF:SYBLFdAYaxF","tlshash":"e34298239cd08c375e13428ae9e62a9de763c007ea993940f6ed051f0f92edac933355","first_seen":"2026-07-10T12:44:45.650388Z","last_seen":"2026-07-12T22:21:57.914185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":29,"connect":16,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/media/prime.css","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:20.742Z","timestamp":1783894880742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET /media/prime.css HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 May 2026 07:58:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1bea31-2acf\"\r\nexpires: Mon, 13 Jul 2026 10:21:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLNaXjlvDDmvtTsI64gs8PtrmS9FZ3VLtJDYVpyrqYCXrfISyt702OP6Y6SrsJGDYaG6dSucHZaAJPs7aUthUHaI0d6IURNXqIpLv0oEufOl5etIA0P6dSvsYNyHpl3slw%3D%3D\"}]}\r\ncf-ray: a1a370bcaba40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10959,"size_decoded":3540,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a8b8fe4946d1739be591f82e551de3e9","sha1":"aaf3f65c3a5ff600263ca1a6526c832dc32408e5","sha256":"1c5a2e1c940a54a94531e174e1fec539c9e6865968c6642cd95f887abd5b0ddb","sha512":"fda6eac799ade8b57b0c045cf172554530549c0913859a1e82784b9b150c5b3f82a89f3f5fe9576c2d38d3d52ad1bed6754542a8efa11c3f1c4126a2b4a8dd25","ssdeep":"192:NPqOXcw9WnuTYBB6QDOzAV0IldSM2C+5q5CwoTXX1pcnEFpnayw/S:NPqN6QDOzAayB5CTXX1bzL","tlshash":"6c32e099ee3a1006e63bdf74f7720a56b75924218622633afff45007b28057c6271f8c","first_seen":"2026-07-10T12:44:45.652661Z","last_seen":"2026-07-12T22:21:57.915538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/media/direct-download.js","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:20.752Z","timestamp":1783894880752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET /media/direct-download.js HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:20 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a4fd68a-1da\"\r\nlast-modified: Thu, 09 Jul 2026 17:12:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 13 Jul 2026 10:21:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTxbA9NzwLR1dc0CP6lscTRs2XVi8r94HurRQsTKdsjSFl44sd5byf0mr1UF7wwZGFkLK5rbFef4sPmnfOBTcVgWPpOuOIXzeUu%2B1A7MytLiI89wCeGjWdbNeWPfvjb0DA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a370bcbba60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474,"size_decoded":1032,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5dabfae0e5cda4499c19ef94469ad76b","sha1":"7e2dda1a376137def89c16b03b35ae52043899ef","sha256":"6647e1ce4aec399a91820ee6ef61a4383705ea2e25b048b61be7f7b87d224c30","sha512":"d1a20a7390db5d04e145a48f9985180576581a17e2cdcba381b3f17c5f7cdc81680c5177a1b7fc13c5c8b3ba9f1ad3b67ac21d558730097bc56f09eb1afb3cc9","ssdeep":"","tlshash":"d4f0dc4b34c2521c4e7263b0c78f0d0ed7269337082d8230b8d1e965beb06201aabcef","first_seen":"2026-07-10T12:44:45.654886Z","last_seen":"2026-07-12T22:21:57.916567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/media/app-logo-alt.png","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:20.759Z","timestamp":1783894880759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET /media/app-logo-alt.png HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 31 May 2026 07:58:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a1bea2c-736\"\r\nexpires: Tue, 11 Aug 2026 22:21:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goWdo6NpxRTw74XQqVK1xiK%2FT92OIHT0lMVrJsq%2BJkJUoST%2BjRJrJWi6HmrNR36Lh%2BYkkL4wQhNMnEidGZCcWOdj3gVe18dhu7unnXGeuyjWqVOIPcQT267UT5dJT6O%2Fyw%3D%3D\"}]}\r\ncf-ray: a1a370bccbaa0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1846,"size_decoded":2603,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"673b5e5d8105f935f17f9d3eb7e0fcad","sha1":"e490c4c5ea271cafe8c9831141478ed356b52c31","sha256":"e5a59d107bff342f7f90ab96296868b889799c6febe04a5a72fa35af7d7d9a55","sha512":"405766df24c0cd0b7997162c2b7bce2bb92c691fdf263077b6609e96f2f8cf8bd36c3e10116af385a5c075defdfc12b1e2580f0804ce0bc668eca8dcefc0c11d","ssdeep":"","tlshash":"973117c41c56163480f4e833082cbfe5a67df8a31fd988c260c216722cb22acf8d08ca","first_seen":"2024-10-31T19:51:22.534256Z","last_seen":"2026-07-12T22:21:57.917533Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/apple-touch-icon.png","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:21.015Z","timestamp":1783894881015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 31 May 2026 07:57:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1bea06-295c\"\r\nexpires: Tue, 11 Aug 2026 22:21:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9vDIIyiTrw6gaFOSKe9GUuiu%2BJaUGzcBMg%2FIEupy4vLBU38FhYWEfc0z39NJxXnd%2FFEBGTD0V%2B3p3qkn2%2Bu5YSSFXLGbTj0KIYQiIQNLhYUKJ%2B8%2FUbo43qw9ST2ERJkAA%3D%3D\"}]}\r\ncf-ray: a1a370be7c120731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10588,"size_decoded":11346,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"16d0052228dd0d25061381cf23cea1d0","sha1":"338ff4985e79f5c57520b7af8cd2db3067334f1b","sha256":"41e888f51c0fe6f6456da31f97969b6f89736950fdad8e9c88cc54c952844dcb","sha512":"7a622095be49170382b599ac04a55f0cece724f9ff03df3f99356cdb6a395e0014c2c37605a4631e65014709c8906659680405233d209395f011b5d4a05d30d7","ssdeep":"192:F3L9gNyUYstNNul5ubXuteXcCOFiNPdERU8ilBZvNwZKts+8vIpx:8YCULuTuWQFirERWlnEos+sIpx","tlshash":"c222c08a312fec0b67bfa449d650c8df4bcf4999d338c37e109c46a2b21690c15b9ba1","first_seen":"2026-07-10T12:44:45.658212Z","last_seen":"2026-07-12T22:21:57.918678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/favicon.svg","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:21.017Z","timestamp":1783894881017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 31 May 2026 07:58:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1bea0e-2462\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PttOAHIARrmdC3103luGHXRbTaOvC5jroYWX4qzzaX6ZSWAbMI8AtmWP7h5AKTFF4%2FlkhqqP6P99t1LT0pp2eEcieoHgW7uarAW3eNVohr08%2BDZhO4xga96V7dIiXUvs5g%3D%3D\"}]}\r\ncf-ray: a1a370be7c130731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9314,"size_decoded":7801,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba4d0b15fc8c2df1149b50ba8bd711d8","sha1":"14212d889f5e74946ea0ec9c728adee78e96d4de","sha256":"295f4a20aa05b8e5780d7f3c5a08b8ab00432ba5be3f9d381bf842bf6677d559","sha512":"024f04f5eed530a4f279413cf2882c373876215498316f08900dcc05cbceee351b8ea14b7c5dc97ba35fd782c37c6fc7f5cc30047c8f5d2a0a910d4f97b55f1e","ssdeep":"192:ckbGZhKbbBwPZF65ohgWNcU/LKm+74XEi1/4X2uF9GkuZSz:vbpbmP7aUXF+X2uFUv2","tlshash":"0c12cf1a4952cf3ec5c892229fde1b46dc21f3c5038419978d6e64c633b178654efb5a","first_seen":"2026-07-10T12:44:45.655883Z","last_seen":"2026-07-12T22:21:57.919634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-87EMMNSRZ2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:20.740Z","timestamp":1783894880740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:29 GMT","end":"Mon, 14 Sep 2026 08:35:28 GMT"},"fingerprint":{"sha1":"4E:CE:B0:5B:5A:94:F2:15:05:64:F7:63:8C:23:58:95:2F:72:74:7B","sha256":"16:29:FC:E9:EC:BC:FF:2E:2F:4D:FB:5F:6A:E5:8F:51:7A:25:FE:6D:73:E4:66:1E:AE:DF:5B:F6:06:F3:36:E9"}}},"request":{"raw":"GET /gtag/js?id=G-87EMMNSRZ2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 22:21:20 GMT\r\nexpires: Sun, 12 Jul 2026 22:21:20 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 164882\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485653,"size_decoded":165486,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"28edc4d493d05bb1196a6cbeea39f341","sha1":"95521bd64f046b6989e55df0dc336c58f614d3c4","sha256":"296c90e1020abe6490a134f7d2c9cf7db2b2c07e592be848087d5ebdeb871244","sha512":"e7e5db94ec27cee0173a23259e043a76fab874f35f11bb3232f9f7640ca2b8f90e43ec6745815114acb196a0cc8028727be95059750eb9969db72f88e400c539","ssdeep":"6144:x+p5o0JeYuozbF3Vb25pvMlci0SJGWox3lytZDP3OfAn8l:spIYnFB2j4DmfA8l","tlshash":"54a4f9cdb3d674625396f478903f018ba57b28e2b44cc899b189cce42e7465a8277f7c","first_seen":"2026-07-12T22:21:57.920691Z","last_seen":"2026-07-12T22:21:57.920691Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":30,"connect":15,"send":0,"wait":38,"receive":48,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"windirstat.dev/media/main-interface-shot.webp","fqdn":"windirstat.dev","domain":"windirstat.dev","tld":"dev"},"ip":{"addr":"172.67.173.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:20.749Z","timestamp":1783894880749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"windirstat.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:22:30 GMT","end":"Sat, 29 Aug 2026 07:20:55 GMT"},"fingerprint":{"sha1":"56:C7:4E:F7:B8:9B:29:AD:D4:62:E0:93:6D:A8:37:EA:DF:86:3E:54","sha256":"9A:BB:22:E0:42:F3:10:0F:00:F8:D6:69:D0:4E:6A:5D:2C:BF:CB:C7:31:22:8C:6C:EB:74:58:FF:EF:66:A2:20"}}},"request":{"raw":"GET /media/main-interface-shot.webp HTTP/1.1\r\nHost: windirstat.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:21:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 31 May 2026 07:58:39 GMT\r\npriority: u=3,i\r\netag: \"6a1bea2f-15684\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsV7aUvG3xb8Ir1GuTNuAVZE1Qe3oMHW06Cu2QZjv9lztEum%2FRrdB9PBmcRtsgsZ5WeRavVO6hdFckLgJFoNS09yEA2FjvFHlDvWSacEe4oOUzlMwfIIfjpQErS0H1HLoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a370bcbba50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87684,"size_decoded":88418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8381cd6e87f53a53f7b7ca90ec680524","sha1":"b11558c371f9ffe0e465ff8ccfadf29beaaace8f","sha256":"0dfb503844503328ae5f7feafe8d4fe7a991388ad7e0f01040e9a9c2df5b97dc","sha512":"0d6f217df2a45e2a6df9c705cd1b5ef62a5d7bdbb8d7c4a5956fcb53ac6196b79f130810b6a06cb89617f23c5a8f375f6f1c5dcc853d804b696e4a4fe43aa73c","ssdeep":"1536:iUI4TV4I+ugNHbNpIuyzk67yROFEi3kD1vCK60GxANoQIquS61:iUMJFbNp4k6WROFEi3kD1vpGaoQIquz","tlshash":"c88302644d012c6c06926b9e487f01a66ebd61c049bfbb32fb0b5d59f8d020f2d87971","first_seen":"2026-07-10T12:44:45.653722Z","last_seen":"2026-07-12T22:21:57.921452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"windirstat.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.clarity.ms/tag/wzm3ivx4s4","fqdn":"www.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:20.754Z","timestamp":1783894880754,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tag/wzm3ivx4s4 HTTP/1.1\r\nHost: www.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://windirstat.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T02:55:22.330136Z","times_seen":17202442,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-87EMMNSRZ2\u0026gtm=45je6781h1v9254083795za200zd9254083795\u0026_p=1783894880723\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=2111516355.1783894881\u0026frm=0\u0026pscdl=noapi\u0026rcb=17\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115938465~115938469~118826209~118897920~118897930~119027224\u0026sid=1783894881\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwindirstat.dev%2F\u0026dt=WinDirStat%20%E2%80%94%20Windows%20disk%20analyzer%20%26%20storage%20mapper%20(GPLv2)\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1084","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://windirstat.dev/","date":"2026-07-12T22:21:21.089Z","timestamp":1783894881089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:22 GMT","end":"Mon, 14 Sep 2026 08:35:21 GMT"},"fingerprint":{"sha1":"DB:4E:2D:EB:F0:56:F1:07:6B:4F:85:F4:2B:EA:5F:FD:82:2A:39:0E","sha256":"4C:CD:35:A7:05:C9:07:D5:35:87:BA:49:DA:25:0E:06:59:D4:AC:CE:4B:F1:BC:66:40:BD:A0:4B:24:0A:98:2C"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-87EMMNSRZ2\u0026gtm=45je6781h1v9254083795za200zd9254083795\u0026_p=1783894880723\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=2111516355.1783894881\u0026frm=0\u0026pscdl=noapi\u0026rcb=17\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115938465~115938469~118826209~118897920~118897930~119027224\u0026sid=1783894881\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwindirstat.dev%2F\u0026dt=WinDirStat%20%E2%80%94%20Windows%20disk%20analyzer%20%26%20storage%20mapper%20(GPLv2)\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1084 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://windirstat.dev/\r\nOrigin: https://windirstat.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://windirstat.dev\r\ndate: Sun, 12 Jul 2026 22:21:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:139:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:139:0\r\nreport-to: {\"group\":\"ascnsrsggc:139:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:139:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":838,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T02:55:22.330136Z","times_seen":17202442,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":32,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}