{"report_id":"ceed09bf-f770-4567-830f-09489cde25b1","version":6,"status":"done","tags":[],"date":"2026-03-24T19:09:08Z","url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"title":"nhomvip | SNOTE.VIP","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"2816c64a0294fb7446bb13550bfd031f","sha1":"7c1430d5c928b1f3d4ae5fa2c8e8016a5c75a9aa","sha256":"958656df35ec9febb87833aa927c5ed36068f2126dc152760d4a19b376f4e76d","sha512":"dedb453481d109dcd5973e32a2f669f7e9cab96706f52ac4b94bda5d0e7e40df596ae59e33cd4b38d43dc45b801a7d39db324af8cab907e494300cd91bb66b91","ssdeep":"","tlshash":"dde026ea1d7ac834a9a4038620b2e3ac1a6062a0b711d70442d8dc7a9f20fd78ca2948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T19:09:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mf.climaxjoyant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mf.climaxjoyant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mf.climaxjoyant.com","ip":{"addr":"188.42.138.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-06-29","domain_rank":0,"first_seen":"2025-07-04T10:44:35.923186Z","last_seen":"2026-03-13T17:09:17.222124Z","alert_count":2,"request_count":1,"received_data":1353,"sent_data":391,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"snote.vip","ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-11","domain_rank":215228,"first_seen":"2025-03-16T02:58:31.295004Z","last_seen":"2026-03-19T16:59:05.259002Z","alert_count":9,"request_count":9,"received_data":926456,"sent_data":16015,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"TinyMCE","description":"TinyMCE is an online rich-text editor released as open-source software. TinyMCE is designed to integrate with JavaScript libraries, Vue.js, and AngularJS as well as content management systems such as Joomla!, and WordPress.","website":"https://www.tiny.cloud/tinymce/","common_platform_enumeration":"cpe:2.3:a:tiny:tinymce:*:*:*:*:*:*:*:*","icon":"TinyMCE.svg","categories":["Rich text editors"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-22T22:41:55.494839Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":5867,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"snote.vip/js/app.js?id=7e1a0f98144e5db0ed58d3647df11f11","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e1a0f98144e5db0ed58d3647df11f11","sha1":"dc2d66eb89198fb7f23e0bf75aeb37d98f4c7c90","sha256":"1c26f73a26d8ab52bff890cf9c16276eb98d59016024b62113d9504018254816","sha512":"ce3a263d00023ec7770272d8b2e2c30d07a133f0ee0fa63b3698ea9a1f0528f030e3b6b8559c6e05bd5fcf50f11be4525c18b87d6bcda4b7516c7abc7611c6b3","ssdeep":"3072:qI7AyrNBY+Vp5MUUyttWop+l+p4m6dTvMxxTqHvy6qkGuPecIdKP:qGE+Vp8+tD0+36dTvMxPVkG1cIdM","tlshash":"a044d6c9b292b03243ab60b5407f450bf23a6d59740e9488f2a9e4d97d7c94ea137f3d","size":256178,"data":"","first_seen":"2025-01-03T16:43:31.373682Z","last_seen":"2026-05-16T22:20:36.544058Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd97e478dfb03dba22406b7a7567896","sha1":"39c802fe44094c235b873ef7173fa9e46524516d","sha256":"c7ce91ee9e34489333d9c592643e7653787a8233abe48a790b6e71ab607064fd","sha512":"aa4bb4320f8aa0788d675b868ea72a6a46a463b848be7e9d3e84e7706a94d9ac22bff2e38bab8e8660c0f0b75473d7593d6efb3c595fdf686913b67b6e8204db","ssdeep":"","tlshash":"a6d0235519758c30a59802461077d3f525702154b711930581cccc2f6f21ed344f195c","size":217,"data":"","first_seen":"2026-03-24T19:09:12.130546Z","last_seen":"2026-03-24T19:09:12.130546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7561e4729610f00f04de5633e5e78985","sha1":"271a8575c36321609bd7765c39cb7645ad59b177","sha256":"02ae0b38c413f08b22691036b17d74ecdabb8c4492e25c56dfece7e50e8cff2d","sha512":"d0d91f94c14cbeaec168925620be2cee73719bae1ae0753972e39f634e2bbd2f8b9f7a7491a664cc823bfe69a2f91d2694323dd46486b4d40449faab0c2b5553","ssdeep":"96:zsfCx1versNVBfz064fGX9fiBmhLcG5rCprYWOi:7x12gfo6iwhLcG5rCprYWOi","tlshash":"45c1640864a711a7b823253e6bff9590b8b644679805dd30b98e97481f90f5d10fffc2","size":5934,"data":"","first_seen":"2025-12-28T20:26:19.417015Z","last_seen":"2026-05-16T22:20:36.545176Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-05-16T22:09:05.389248Z","times_seen":76684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35657099541321f9d3877a8bd1be7c6","sha1":"ec1ed137c11a5e6b3f183e24a4cfcdd5b84179a5","sha256":"e2d7d38db89544b3d1432603a9a79bf804bd6af5c748ff4944a9d8573821bb60","sha512":"cefa6a475cfa9a28193276b2f271b0f002481902c114cd9c35a22ff2322a36fd22aaa1f4bf7faa9859da758fee0af6075036ef831c08f983f43c80a8d8f1701a","ssdeep":"","tlshash":"de317816f1e657b521b720368fe7d824e991400fa2088e44bf5c7de07f4b25486883bd","size":1760,"data":"","first_seen":"2025-03-13T13:48:38.84158Z","last_seen":"2026-05-16T22:20:36.545777Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37eeb4693deb3222bdcb592bf519716e","sha1":"dbf20d7b6dca9c41f81902a15c5a36e7ccd7c1db","sha256":"d4b54de3a2192cc3595fb78e03ab6b5d1ff4b9aeea1c94659e013b71eefc2552","sha512":"a4fd5f3d127e04aa6956c44c993b929c40e6fdde6c7a5cb95fb8147c84d21e0c7c6ee25e492f1fca302897c7c4653eab79e4bfe47859a06d644e33e1b8dbde18","ssdeep":"768:BS+GNPnt0AnI4yLcVmp2srcd98/yZXnS20siKj+:Xi0IIFL9vA38/yZXn/C","tlshash":"fbc2e8c57ec970a8836a70b9d46b70faa2be698830186d58c210f4fcfd7535c9635e78","size":26168,"data":"","first_seen":"2026-03-24T19:09:12.128969Z","last_seen":"2026-03-24T19:39:22.712138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mf.climaxjoyant.com/rPlP2Y4U2LbJ/69183","fqdn":"mf.climaxjoyant.com","domain":"climaxjoyant.com","tld":"com"},"ip":{"addr":"188.42.138.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-16T22:20:36.544548Z","times_seen":16427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97e5818b48871b25132c6b78af9ed4a4","sha1":"77d5d7a2e214308d4bfe551c7d5b359767813844","sha256":"fe18e9d04441f62d817431425cc3b6d9604c395644606d0eaaf90fb0fab05725","sha512":"3d96829372cebfb806037127ac136f2af86f41fae645a1bbc236a585f88c571128275089c61ca82fc909f1335afa47ab64d40930b7c749ee8bff4081a525e74f","ssdeep":"","tlshash":"f0213528f5fa2670883370b94fbf9219f93e152f94058ea8b95d17c45f49a20e48396d","size":1439,"data":"","first_seen":"2025-03-13T13:48:38.842949Z","last_seen":"2026-05-16T22:20:36.546377Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/tinymce/tinymce.min.js","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eacf8ed047073f7fae4894d042377ae","sha1":"7f97bbd2ed9f86d394770ba416d4c9a6d5bc7934","sha256":"89b560de72ecd035f5d13eebfc6c4a67374bb2ac864c3cd5050bfd5a6c503add","sha512":"552e0d6eb68f843302d21dd82725b40e70fa14a48e24f78474c405b484d125adff7c6b3b99ec77a8f6c9c16d9c1a7036c1ba1a0c2e740c671a5b989806608760","ssdeep":"6144:n/VEWJDR3w6KCSTCmiyl61hBkCrzsn3Hzk:td3TKFTIl5kCrzsng","tlshash":"cc7408dd36c1b03263a771b9007f200af23b5d55680e8910e636d4e97c7998e936bfad","size":349270,"data":"","first_seen":"2023-03-07T22:19:22Z","last_seen":"2026-05-16T22:20:36.540662Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d2b705517938b952bbf49009ca43467","sha1":"e46f8b503f5acfe336c57b8f340a27f35bdec67d","sha256":"cba795914b423d3d88761fa29d90d96d1abf1b778f89bbf6795198c73ae661e7","sha512":"277cd0508686d771f8c9724c747d5e1d7aa44584b6b97cb2d113620b92d74e5dbed68cea65f71dbf78372681db7300518f2c95239d0a75dc4d0309ac7321e95f","ssdeep":"","tlshash":"7f1100753b2a1534cac5818b317ee7a93d3260217b029144c36ccc285d18e8714efcbe","size":902,"data":"","first_seen":"2026-03-24T19:09:12.13404Z","last_seen":"2026-03-24T19:09:12.13404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mf.climaxjoyant.com/rPlP2Y4U2LbJ/69183","fqdn":"mf.climaxjoyant.com","domain":"climaxjoyant.com","tld":"com"},"ip":{"addr":"188.42.138.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mf.climaxjoyant.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:20:19 GMT","end":"Thu, 18 Jun 2026 02:20:18 GMT"},"fingerprint":{"sha1":"E9:7A:9B:A1:5F:E7:99:B4:A8:00:CE:CF:59:E7:26:5D:22:88:52:13","sha256":"C1:0D:1F:E4:FB:49:DE:E2:3B:B6:C0:D7:E4:01:2A:72:40:8B:09:CB:12:13:5B:A4:52:56:69:F1:83:83:BB:7D"}}},"request":{"raw":"GET /rPlP2Y4U2LbJ/69183 HTTP/1.1\r\nHost: mf.climaxjoyant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Wed, 25-Mar-2026 19:08:47 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLoaGZEQCHQinh; expires=Wed, 25-Mar-2026 19:08:47 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-16T22:20:36.544548Z","times_seen":16427,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":117,"dns":82,"connect":18,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mf.climaxjoyant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mf.climaxjoyant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e17f76d3d5a902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T22:14:49.392477Z","times_seen":15300628,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/cdn-cgi/rum?","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snote.vip/notes/nhomvip\r\ncontent-type: application/json\r\nContent-Length: 646\r\nOrigin: https://snote.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":646,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":984,\"startTime\":1774379326561,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"544d7e38-3906-4a59-8a1c-5afd983b67fd\",\"location\":\"https://snote.vip/notes/nhomvip\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":10,\"domainLookupEnd\":28,\"connectStart\":28,\"connectEnd\":61,\"requestStart\":61,\"responseStart\":476,\"responseEnd\":477,\"domInteractive\":945,\"domComplete\":1120,\"loadEventStart\":1120,\"loadEventEnd\":1120,\"transferSize\":7389,\"decodedBodySize\":14982},\"siteToken\":\"221247cc10444d7fb4e28cad5f857bf7\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://snote.vip\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O04JKOqzM0kwg2UYpA9o68ZdvQOKddCgapzoYX%2FoBiR9y58Q%2Fg0BMdc8%2FtZya7oFe%2F5Mo8OnDwxa6E2lvLaV86xeDzTsoaRpJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e17f76e1dac902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T22:14:49.392477Z","times_seen":15300628,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/notes/nhomvip","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T19:08:46.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /notes/nhomvip HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; expires=Wed, 25-Mar-2026 11:47:46 GMT; Max-Age=59940; path=/\nonline_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; expires=Wed, 25-Mar-2026 11:47:46 GMT; Max-Age=59940; path=/; httponly\nview-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; expires=Wed, 25-Mar-2026 19:08:46 GMT; Max-Age=86400; path=/; httponly\n8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D; expires=Wed, 25-Mar-2026 11:47:46 GMT; Max-Age=59940; path=/; httponly\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=86400, enforce\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=393\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAgTu0NOgcPBSzy%2B%2B%2FT%2FbGj4HTnRlPtcPLow%2BoVzmZKieeiA%2F1dsTCRQMfR8%2Fw3eHGoYhfC1AkU4osAmz1afPM1HK1yoL2ZUvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e17f7676d78f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"TinyMCE","description":"TinyMCE is an online rich-text editor released as open-source software. TinyMCE is designed to integrate with JavaScript libraries, Vue.js, and AngularJS as well as content management systems such as Joomla!, and WordPress.","website":"https://www.tiny.cloud/tinymce/","common_platform_enumeration":"cpe:2.3:a:tiny:tinymce:*:*:*:*:*:*:*:*","icon":"TinyMCE.svg","categories":["Rich text editors"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14982,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1422), with CRLF, LF line terminators","md5":"121afc23d8c62120ee5e5e19ab3847d3","sha1":"de9f0f0302816918cd703118cc459f793949b739","sha256":"6ff8e45993644199582820b6a91178c589d8563dfc24e90af9db6308277bcf16","sha512":"ffc3ec9d4f155fdd83b95c3a7b0ef8e58d763e3213bb3d0d96ebf332a2b97054700e2d1bcb05580c0e5d8e689b04d7cf5d6e64095c08ca0cdc3d75e10753df6d","ssdeep":"192:bax12gfo6iwhLcG5rCprYWOQYy9GH7JKQQWsAx8Ka5vKMwZwiDtSnx/30P9tM:bax12gp7WsQKjZenx/30TM","tlshash":"c862c719a8f22272503310be6bfbd614fda6401bd605dd10b59dabc82fa4f5044a7fed","first_seen":"2026-03-24T19:09:12.124731Z","last_seen":"2026-03-24T19:09:12.124731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":48,"dns":18,"connect":8,"send":0,"wait":415,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/css/app.css?id=35e107b10a6a054f841300df16fa640f","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /css/app.css?id=35e107b10a6a054f841300df16fa640f HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snote.vip/notes/nhomvip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 29 Jul 2023 10:42:47 GMT\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64c4ed27-3b84f\"\r\nexpires: Wed, 25 Mar 2026 21:47:32 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 508874\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHDx2YMgiaDNfwFXd5MXu6TtZMv6mEtz9YlDDtkq3%2FPG4lM784x5LBwhP%2F0PfFK1cGj9zDI%2BUzTAc9dfY%2Fr7KHGM1DLgC8fLnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9e17f76aeca1902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243791,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65231)","md5":"35e107b10a6a054f841300df16fa640f","sha1":"50a336e18473fe2868e64ef2ba8a499b87291793","sha256":"89884ae9b816362779adfa6a41e5f4f500e2bff1c596ab4c94b6f0f0bd547fc3","sha512":"392793dbc9a14a58d42fb66c6f4c2914e5f83adfc021f5735194433775f0842251ebad043cb47fbe85e72a82ad43e1379d01ba7b4d120ea5dba204c7b831633c","ssdeep":"3072:oXMdKNq3SYiLENM6HN265+0Z80GFjyXGu6pfZCi:oXMgNq3SYiLENM6HN2600ZjGFjiMP","tlshash":"80341ee5f14824d9b772c10fab90b7bc55bbf338d6510eaaf02f6a1c4ac52851592f2c","first_seen":"2025-04-26T21:18:09.28887Z","last_seen":"2026-05-16T22:20:36.543494Z","times_seen":240,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/js/app.js?id=7e1a0f98144e5db0ed58d3647df11f11","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /js/app.js?id=7e1a0f98144e5db0ed58d3647df11f11 HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snote.vip/notes/nhomvip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 29 Jul 2023 10:42:48 GMT\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64c4ed28-3e8b2\"\r\nexpires: Sun, 29 Mar 2026 12:09:18 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 197968\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qfYkZ%2B7091BLFDWtVQIU9sY5MpQm%2Bn0ehksmEjhRTGqFfgyl2YHITf2cMJenziMeTYiA4F9GRD2xOp2cmzJVmZPNI12LjbS0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9e17f76afca3902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256178,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65475)","md5":"7e1a0f98144e5db0ed58d3647df11f11","sha1":"dc2d66eb89198fb7f23e0bf75aeb37d98f4c7c90","sha256":"1c26f73a26d8ab52bff890cf9c16276eb98d59016024b62113d9504018254816","sha512":"ce3a263d00023ec7770272d8b2e2c30d07a133f0ee0fa63b3698ea9a1f0528f030e3b6b8559c6e05bd5fcf50f11be4525c18b87d6bcda4b7516c7abc7611c6b3","ssdeep":"3072:qI7AyrNBY+Vp5MUUyttWop+l+p4m6dTvMxxTqHvy6qkGuPecIdKP:qGE+Vp8+tD0+36dTvMxPVkG1cIdM","tlshash":"a044d6c9b292b03243ab60b5407f450bf23a6d59740e9488f2a9e4d97d7c94ea137f3d","first_seen":"2025-01-03T16:43:31.373682Z","last_seen":"2026-05-16T22:20:36.544058Z","times_seen":244,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://snote.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e17f76b3f34370a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-05-16T22:09:05.389248Z","times_seen":76684,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":34,"dns":10,"connect":8,"send":0,"wait":15,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:300,400,600","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /css?family=Raleway:300,400,600 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Mar 2026 19:08:47 GMT\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5181,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ebdf3ba076278ca56e52c9a0baa81cf9","sha1":"4625c51594a6b50a31bac34bd6ce1dae7e3505f0","sha256":"6eb09e4fe8fcb2f6d7c833a78de514a096e2465d1feb56ee6a1ee287f18b9a70","sha512":"c7a954fa38e60189fd66d93243d5f0d496198984e3e35d2b27818c01d824a7f496c69677f902fb5d71b04693987b8bf732e5b44c9c372a7942607a63a2c4d679","ssdeep":"96:vOWifOWGFZOGOWHxOWXJc+uKOWGNaOLifOLGFZOGOLHxOLXJc+uKOLGNaOxTifOp:3iHT+H1Dl0iaTzH0DkGi4TtHGD2p","tlshash":"00b18ca10917d404eb876dca63ce3e36ee8e62057047953a9bfd58bcbca6d36139070d","first_seen":"2025-09-11T19:11:59.955132Z","last_seen":"2026-05-16T10:01:30.055253Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":123,"dns":1,"connect":27,"send":0,"wait":49,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/favicon.ico","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snote.vip/notes/nhomvip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 13 Mar 2025 05:00:52 GMT\r\npriority: u=6,i=?0\r\nreferrer-policy: same-origin\r\nexpires: Sat, 18 Apr 2026 04:06:25 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 486141\r\ncf-cache-status: HIT\r\netag: W/\"67d26684-47e\"\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fjgk7hJzIgckTVp7TijuNmsRHUCRjEg%2B4Z8iRpz0638NANiLl2kZJXhvwARAlebRQJmbdrtDw4Orj3bmcgV98s3l16EV7AoHxQ%3D%3D\"}]}\r\ncf-ray: 9e17f76d3d58902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"1df7aa83cb9e2dffc68ded9c6f1ace14","sha1":"768924ef09d1239420ddb7856f4e40d5a265dddd","sha256":"9d7cf376d66be76d56008548c5876ceb9d7d1201122306cca8d7af9b3b7ef440","sha512":"717393f172fc8a4192455eaca2b78174c5b61d0176b94f70703f9c3ae43debe521478e07179267c823a85074521db8a3c11cdbeb5d6acbb8846325b835851282","ssdeep":"","tlshash":"3f21127424d40898ea00fc3091256f2a51c77deadb74d8639e8678310b371a2c5e6fb6","first_seen":"2025-03-13T13:48:38.807938Z","last_seen":"2026-05-16T22:20:36.541929Z","times_seen":241,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e17f76d6d6f902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (26168), with no line terminators","md5":"37eeb4693deb3222bdcb592bf519716e","sha1":"dbf20d7b6dca9c41f81902a15c5a36e7ccd7c1db","sha256":"d4b54de3a2192cc3595fb78e03ab6b5d1ff4b9aeea1c94659e013b71eefc2552","sha512":"a4fd5f3d127e04aa6956c44c993b929c40e6fdde6c7a5cb95fb8147c84d21e0c7c6ee25e492f1fca302897c7c4653eab79e4bfe47859a06d644e33e1b8dbde18","ssdeep":"768:BS+GNPnt0AnI4yLcVmp2srcd98/yZXnS20siKj+:Xi0IIFL9vA38/yZXn/C","tlshash":"fbc2e8c57ec970a8836a70b9d46b70faa2be698830186d58c210f4fcfd7535c9635e78","first_seen":"2026-03-24T19:09:12.128969Z","last_seen":"2026-03-24T19:39:22.712138Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.7088364578332287:1774377415:13QlD6HMbJFesX8pfjqNyTuCgLHd2KXIYafR6hHMzcI/9e17f7676d78f527","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.7088364578332287:1774377415:13QlD6HMbJFesX8pfjqNyTuCgLHd2KXIYafR6hHMzcI/9e17f7676d78f527 HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12145\r\nOrigin: https://snote.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://snote.vip/notes/nhomvip\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=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%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12145,"data":"Ps5kKd-ALY1ff-+1YfLAr-Y0R0PL0Pk-+-2O50cke+1R0lJiiVp78+1X5bC01kih70MAmk120OMT-z7AjECpC0iuCvC0Lhq70-dk-D0Ji+-MY5OscbKEJ25-S4JDjwKSsk0tgm5s7csqtsJxoV00PATOzYqL0b7e-A6o7Va1kkeSTotzORjdgq2rg7T0hY7EokYHX0-6vWwYLTML9LfPam0-Wyk0m0etlFT-UEx+Jteub9p5cstvRx5Lk90-hAk0jOb3EUBXCUk0GBlXyRtUL006vrM0qe0-BjFk$e1Og01Bbr3eMZUXgV00UAck4zOAgvjyw4zsP70O4T+wycz00FeGLgepL+OO+Of+70CHQ0V3ga705zLT4DrBEt7-64eeTUwy518x68lqjFeat$0W5MUsJ85vQTaUZj0+iukkLL6rv9gG0LEyrKdXrH4cTBrG7ndAMXbM2OM9tKq3ao7-gAOki-rm+dtietwtGa52Z5aJnGXekhLTSACayCCOJwa9EGUUfzUAk-darHqXdDwP6mp500l8WTRMOQr33F+ryoAd+Xv4XJfEJL3Jngrau0uXB9zr+7PXhWLby-mKyAKQu4l702BZqiyGkbytYGoPYnjNTwokwrlmXS-RUzOEC6q3AYrOu6cgJ-GZ78r7VqyajzvvxYGUs$xGLjA9-k9zJj9yOXoAjcGrU9kdr6rnmRmskP0U+062csqky9yKf-CvdQrdlxFJJ-RJNYuGUFqQ$efhM+lv5EFkYBu5zaY+$Ydll1dNNne27g-v00utg+dQdTtdaY7YgA+QiCy-kWQmw7+0R-s4kNLbFL1JbNcd3+$d2F+yhstotkv25$qkKOCkLP7ZeZ8k30ob+DrF2+TkR5ttzOLT0doY7u3c5eu3A5tZ1eEAs3OL5+-KF55kditbCr1T+0oX5YHmedgtk1YoKt25Y6gb+tqk0YVgdi5TKRbUbrQpC$-dFQ0gkYQ+6zeLxn-XQm1t2+wrg3O34OKEdQL4kYTdKT4qdHSZ6-4S+dBVOLM-2PH3s5PoM3XPb0hyrx3tK7N0QD7g4dX6E4TUPdnBOOUc-VDTrBXAQ4gWS9OSigswQp+D1AFQ75AhDcTfFQoX2h$+Ha2C$qCjoTSBE7bS170zl776k1ayzTfdTzsi7CLr-Ts6A4oAY5azHPQN+Yg7M1aQfKTcgCrTYWe27dKJi5lLVjkiPtaL5HO$3DP1BTS1eF0YHo3MCdOKxz6AKxUL0R06qtR5+UaaUg1rsdADN8tV3dA7lMLjK+cYblPcy9kCce$1rTV5e+1ibz506H$jr8iedvoF0cgS8s+1eLAtOMFQn5vP+NUCHA6UvKLf4QtB9JF1+-Y5pSa4cR0tVZ38JvoL5LckHAvOj4kdlOeepff2+xHmb+bK9h7vAk26ZwF2+TPF1Lvgpn092-H7b1Go7K1L2ZkDsPHqcF1YqdmVZwBDsWeoPGTt7MZkTYL1+cdV0mPbH2dyMl$ppulurLll$HmEH5vD-gP4Gp1fVSPBr0Di4PVi$ZNleeZaQCkjNdW9jN+Gp+292N4oT00P9wkFYHkkrkPmp+L-vkT-+0750MNzo9+aSZFQh-bAm1va76kt03fz10KTX0kc21Ask125e6+B$WLGM+Lf6pX6edUaDk0P6sF5EdCk-dH8y175Rb0G8t1+YToT61PlxnvzFrTTkNvfZfQZB28Dy8aH4fse7bin1v3T2wFqxPg5hF5252-75z8d86p+5H$PBnjXfjs8k6O4cRqb0V8Q6dpHWzeFsfe2OmEpHHDMyTE16uN565eNnriM-pLvef5QWk4Ws1c0dHib0+UgPiYwhid5HES7ypmBiq7-kH-+PtSi5-LUCj5FOdc0TReXkFLghRRBs7CYr5OvQ+c6ckFjllFxd7AzsF2DHXk$6vL-jc-382d77cg5rX0WkTYdWNXdWeQQx5w5C6af7q793M-6FxdTe7-UwHSSSdCj0hTW1D83lSbno6nv67F577QrBUFl5nWT6sbnaUliz1MBQjn715zWHdXkGi-du3ejoPy6Ovt0FtgLH8dQOgOn6QvDjHreLGxcJCbrLwAspUnW0w5Nxoy5U-gLyRlQODTixYOOKQh7Laq7uxBKCQwATMPnhfRJb+hejft7P6e8BAkgSiCS5y4t5EjqrrHkx70HnRb68J66hUEifYHtyto76DdcAoSC1Akx-2alopiEa2h0QjcvxdxTKOaZdDr0d3ev4omphWBe0TG1eeN8dKgj1GwADbzD2pqk0aP5$x+5TnAjwl2EB7ip1Kedrp-lU5ErDQ6Mg2QjOh559Om81qesiOD1w8if1FAEp6b6ivCX01Rsdg4QdXB1Ehb0K7aMe0QP7hoGZC3TLvGJtqTa4Lp1FfSGnocdDeeLxUKKxq6Ddwa0n4KAZOEf1MPktMoS66SVo$eESiwd3+A5EDYKT+k8NEO1a+-q08P+-w8JnWGtMleYnQQWLWiBY0+vlhsyKrnaqLQQEUutq4ifigyT6yNaSSQYK-F2njHktpWOAvs$24$f1y3AJ+kUzOLJ3Xm0puuik-zKlWR+czZsEjWLoTDcnLgXb+sskRuN4f30-A4vEPTRojsOe5EbGr2QnvxHMxZr2j2MhUFQE6r0LHaYBUzx015NemLQG0mq1fm$SPGx5d-OYECyc+X3g8qLskVHYYXkKYOm1qSm-oT5RYWQ5Ffl-3hfDh5m0jifZR6W0+4cbGLilmOkfk6dLqFZOL$6xi1K94HbRge4y2P649Oe7nLdX1dysZk-ErKO2qqe5Top$Fm-0k8fLDfES5cwvvJshqjYuCKEU3aLsmP+SOTuATnK2KL10geFDhPTTb8WPLpht03vycfFH2ouKxOFxbxsxoXzlGX6wTmcHNx6qdJf1aMU8dMDE04LFh5q78LkzxBFsOm3JFXWW4MQ46kiBqMPxcpFU+5kR-GADfLr7kiz0SWXqsB7OJ8jEYHHA4cG54J$qqXfw$yy82nf6Yd8d5kbWREYiqGFzRUdxl0Y1B7a7X1s1mUACnDnRhCBQ0osKvl9PT9fntRx$3AV+utNQjNoYg1K4OeYk2EJLTqYsgdgwdqHY28RZUwBzENzsFHOYpDPkX2eVbpOn6-hE3TtNzHcRTJPmfv-rYfhWKptUaZz31s5c0t$6qog9S2ygwRQph7tU0HFhdLnDrgXhYQZdKAU5sFrvQ2Uj7gODhw3ZKY8eUBuo3EiDJ+ACOTTD04SmDeNqoTHX61aTxxUZU0DiC6jG+WteoRV6dL6n08Kdc6jd4yj2MsT6gEOyYi+V-63OaogbFh9jQZDRHbONuCEDVW1bODtTY70NMtaZ1OFuyBGzJtmuSL+3fFWtAmH4u3MP0J5y1TeGRpOWE2t$iXudG6TU+NuTFwp$yPtBdeOszEkXfq10aNxvsTgpT0+1E22G54wuJQz--WKbhusghDHuMrKKsSs5cKhmxn+R-ZTBikM7lO0f3qurTZlLCDKJ0frmxf12MXloxDz6yHWMGAyoQcG6HWzryMWtL5THLO-7krh-qKx5WU+116+Ugm0V0shs+O8UHP+ok7W08Rrzy$+z7OxOvgq30z3Ugb5$0ynUy3Tk+$LVLjuS7mrFKki7E1s5cpLfLAucxxCflQknxnvfiO1Qld5pu2qpsl1e1XMq1N-7dqsoT6GGv5vH0L0Ag-rA8zxnhsh+eLenT7EDGa8TeHWHHzy3GG8D0W5MLC3SWGFV3wvhCx+OnQdBGnKd7TCgH-rXMqsEk6xA7XzqCTc1KA0x72W4uOnZC+uzQ$vGrU55CnQVlFifM5zruMTcC6i3C2Gbe4hcu5E0QXEt8KMe0He5dHyEKgcqeiCcGSeVWM8JxYrh1OMALe0zFWHiFyyehDdb8beBxNek-fincHK7yrvac6eduX8brWkV-ayg7oKbvVLlWzE9TGC2TpToLmCBCqvVuuKflK7pH7QM13sXyMGU7TkfLgWOghycCgHHzaQZ8zQ10v0Yu+8hWa1x+BuY7lQ2Gl8DLE+7U+W-Q6Mo5R0jCy7invu-+TzRTz+2+lLJ-gi0x58zChq-CfU9HAK7dB+2yMxE0+L98mCF00tMWS3tLbF-3-7z+cGMCfgw1YLH-sTV+cGGvA3S7OM8FGvjKTz8FEHUClTLwKhEHWMrLk8A3kennoC6rLtdweLO1wMm8osTzEFr1rc0QAi$WL0AiAKAnD+rtP3C8v-0ddg-yXydzxMA1YLV-DHYi0QLQudGqe8BdUQrW7yWuA1WuYrzyrv7wAUgKrz-L08Tc-soHukCre07GJ117d-fH4LKh-wt-$8EuO1pW0d$TOT6GE5A5m1O-G+mFz32JOw3+qUze0vxtHw7h$1A1a-Cw4+ovdeLtWl6nth0cqr8+V0w+kdqCfM0T-Uk1Cgv-ZgDwlQ2F35MGtwd73w23qsvlA0xsfQ11QKTzlyqtWig-OuZCrrBJiQQt5UE1VLCqq3ZU7lo+GEvWgEWKSWsCBGxwDsahL5mi9LzhQld-DwdJ0O+8TkzEkE5zDhFL+JOi0de1VGgx6158a8s+06x8hskF0Xazf0Wkf3Pe0XjujuO6qr$ebMw56Uku6JWnSw7sKtXktgF1wvrx83X-Y7XzyyAHJ86EXgZ33qlJ7XSu7OuFu5yhZg2QfCue1-n6a-o1F0FUl5YwMTks3qYgkUdFGTm3zGB3dq$evXK16Md8$rreFM6M3UeQk1rkaLonp60eGvf1jCn60uU5M8a-Mt+wUK8GpG+M354uSnKMR45E$FxUyH5khgLW8F6+13xU3HOEl5it2+kW5kRroL23hC6r5C$0mLl1J-6spyexpxjC-1re$JTsbqF6jq0lgyBlfGKg4vD6pWXKb39CNO8HE-aWs-gGTKvO5k1u7tvKJ08eNeTk4nCrgQXEh52yNOhvRwcQEdtd-1ALYhvLQ8xQnnzy16Blrdl1xnsygr1EgiE-OLQOkGKw-lGnqL3g2lRTgtduxy0tJCs1hXU3WlewZM9-E1qKireLBEhvz+C0P0f0A4i3POevc7Dyi0o6kwD0ZCvUq6lKr6Ke0XEiDw0WxOAJoOanQ3q-5wR46Tzu2Th4aSgel3$hfayMuHUvtx$8KqL1$W-6mtw67kyTzFzk8uF0TRrl3LbhgXCiP+ntc3B8UHHdULvxYX7icMUKeRd4YwbqPXeyQTm51vcqka-qC1brr1g3jyDl2ue0wG+gbXbGlXqE2RbeCwGaOH0czi$CzJLJ446nrQsQygf4eXrQqOWeXuqG8yH-F1KJOS18zG08rha1d13LK-m6ELOrW4VOXkJhjQXztU6n3nFwkO2hE1xeYOSFQgf13ElK8Ju52Wz0khkWe1L8UUuCcUzeRL3E2C2lPnV-3OoHY7NMwtKOXW2vsxYJaE$FzW$KBT-yCEE0hl0h4QX85anu+RrJswT4hhPWq0g4aLfywLGGqwrnsOJUmQr5zMkw2RpRV0x6cxBgnx9GF-nv2ZDHU6Yqeg-eOKK3Ht6C6ulnLshw-ugXS-j7yGFr3hNRi0bcbdAwTUklQzTFa-qvSnmqF-ZTgEv+1uiFFFpJ0eoMFa9LEEpJ6l5weXLwDy5c2UlygQjZXurhPWSsevu6cU0vSSQTlL$M9OwOaPArHkiRt4qG7Uv-Oi-3b4rkhgWH0cC7Pg4l90KihqmG3nwE4lSEDT$s$8+tOMpZr8J1+vr2Fna-H8P6PyMwa0TaLvUqLlynQwh3Ts06xu7tkJ3T$0$191H+yT6sPZsM+i7Mv0-2HCRG0OTkOJTk2yGQVXHL7vmqDK8ekytdg5gdyP8ak0cRYqBGn2r1xgfM9HRFi-wLTh8ybF2Ym1QzLlXZ0UbH3gDUmF1-1UkYsayaOHEKCaaRcUaReRYZYZKHUaU1FLJLH+X6ACctdPTKO8UXz6V+mGBvjQhsBxBxCJ6wkCL67uxT3nzy5u5uFiUyGx0Rjl88Cw4JUqzYJ-J0F6GUAsC3Y-TtYXEHazuO04U7lMO04r31pF3RQTyTXFT50QXECRn2EUE0L+FGlQBwhEfT6sBS4vveA7Fe2-UMPwaEO-Y80zhQe5v0rn1n-Xh3N+pYqJbUESXyuzA3j2R+N10s0XLeAcwa-7o-FeLa0lPSgi9sa4eOiXRF+n-3iqqrvjLdKFdOc+oTWFxWsPrP4Pv0ZY3PzJ+ad0qaR-N6TOAReZLRl3lqT4p64xBa$aOTQpzy$eeQYX5sgd0mSWJ1T2O1KRigFURJJUY46XADSZ7+ofY62vO2JZNXlliMqMP2lQr5PG$3FLzh2QURayzCymw5GpdZeyvX6a0uR6XQ$LzWvlMHKid0zji6Y7h7lvSUSjhson$+Jv78GtfaEGa8K3mLVLfedP60oq2JyuFJxSgHUjD1-XXCpX$aqJUEEZrjURfRJJZwDLtyUrvwAWjQD81YDlixW2LX7CSJakHG8iPtqwr60jsSSmAePGZemZUuEhzTOgmSFl4qd0JYRLbR5EtSdLq-ys2hHJa0DCN6vsTzDxOG$rf0yso3O2ArmLBOsh0kJSWZ5zv2CpV-VicSatUSamHZU2fLp0$tSfjK11q1bq5dkZ$Q--HScfexpEqP24ZGFLZP+YsYbgsPZTdWflByiwruX1K0R19O6CfYexCRY2uDFl$YvyARimlqdSTBUR6nzU2RrlLadLiUOGGr0xixHKNruEzW$aLaN4a0mHUDH8rkHuN7swFlZi4RHDZ20XUtdEN6wCPxCpKpHWDvX06CQle0rHDgK-FjoFYvJt2w98eWfQdYWiGAqn9JiUDdshB1qhXU5z8EYDRYf58m4m+BWME4Ui3PVFpMXSbPP2hOFXdldxxPvYKiteTbJYXyiRRwrasCWHHyoZgDjRO4mhO5kdzGHLuSB2i-YxbxQgC-4tZyU3G6HykfMYzObdhYS1X0DAatOHGUjr8tmC56zyzcNDTXeueGdfuSYbQ4nw4JolWOMiMiSvCfz2akgJvLuGJBc4i3qC3P0loDtlq7GXgQtnw0on7pO4xS9-iiEa-ZLQqOGyHO0O-6Hb0p9h1l$lC2Q890Eni19iFrd4rjd4wxDwJ1ojXM5uNrWqJfceucS6nxtF0fYXXRqLL2c7N2JWd--sZpxDCECLZDZZTl2nGxND1hj5Q4UYRFZByKm-wms9S5cJy86iEZpyr1OPQZrvOfsdfAoBBnt9JAO$ZfkmQzXpV1YHSZvLd45c2ryrrN6Cha3bi1Z4v1GEb+btk4XPuGzkUSKBeGwt-W5vqYEly8TdHyECA75WW7rDLdWq-i5k1Zguf6Dk+12B66sDwXhLzh$JngHUHLvUfunCZnHd-1v1aMNruZYVEpyVVWyV-q6XH5FB85uvp9OLb81Q$3n2H2C3HYkc8piXVL$h1t4DL5Wv4wPJDJll2f6CDwGyUrTxU3DPqjWQqYcDzHD23n1K1Hlx+40$67aFrU$8eaBN$9Rok-QZ10vDbAVsNVBKt4zQgBJFHdbF39cxNUQ8KEEL$KoNYpKRAZeRxtLyH97xMB6HRVljvLPFdeU6gHHab7aFnJq0x$9LEQ6eF21JX9tize7F6eJPkb-JzF25c0-kF$7zfE1Hn4e1ee-bH0k5zhF0NkrwKRjzMAWTUZroibwE+tPzJ0LR+XKlt5tf-46peePHipESdMBYSt$0sdDYkTW4-JvWK+ULuXlC3o7oNTBsi71ci6q$kLvbzPOUuzzC3pNT1HjlnNzJ-$kcYqBtnnsyPso0NTA+jNz0-4eW06rb74f8eLV7DyvYy10Q2fsTTXvfqE7VEFtEC0qtptFYtQLZK8+$-Qohq1+0trG7u5N0ecpK3OEu-K+6Tyefk62ukkYQ9re7iSeQxF-5yU5Y5OJkdFH0QctPje0YEdFdoqAL7D-YE-dF3ksc5p3v81exLRTQo1JAeYOPZ+xLdc+iArYT55v1xdHh7GQ7P8h76CFchFPG2a0ye7kJcG0vPEk5$ks1QYs5YJ5b6yEu-S0D7Y0FYjHFz+Rcla09x28H8WxidAiYl8Yim5M0g0ASFbfF8HeQPk5y1-dpfKe0GB5a3xK7lfHyFw1m5CTomHtPn8xLRtL7w5AF0fcNOncSirtLgE8g25$kZTCR8o8bEu-F55ky8U3tx-B5AQqO1GLeKR-eTBta5kTteYtFOcsqM4BG0+7ylO$w5v5N32dYGeFEiAp5c0QdYNk1-xpzGOvYr5qe+zjQJ24s+UESzd0pHYTrt2YF+q4Brce5-XeO5ddk6esoOAe5njq33i-qbTKxYu0l3--ayW5uQ59thcrzhAkRrA-Hj+n4-3YnjLeq5jsuY$4tQ5wJF0PREfhAo$tHJiD-zy3kaqXOYfDfJx86so-jY+fQEULEC-lqCwrtLL5isw1i0sWrt5Qiccbdl-e5xPFyjy0XzkTROisyFj1epdbtXZbCFtHjKO-6kW227+fjfzreT0v+aYBY5MeRqAA2+viJOKMFoTrGc+gVpL8grucVQts8kPXPceM08-yc7kEL1O-o7vcu7mEPWd28B1RcH7RmmkFHsqzKFFK+Y-U0cCs+gc55MQvR2ZqdzK06H5oDl6hFSzp0$+JABL1$FBx+n8eEfhpYw0M-JQpsSfhr0ZLRect9O5QVu8KgEd$kGAEoQd1FEuYTJN04YbC8+dS1$aVtH-tO25nPQgqHkykFTLbdnP859lAe5-20wA-5yp63s1stw1xg-2OTzDK-PN8v0tF7W6TEpHj83iYiSAAej6EnxhgPdwHPYHL-V1d-o00kATLRKquHAz5AwA5b+LMMx+O+to8iK-d+zc0W0v20KFgP2z5T4O2t1Ad58sUs-B577Yrr0e25COzeCrFr6lSudA$3bPf5hedE+iUYFHuHB6JrgU8n0RbWpAT2o-$Ks0zNcC2J04Zv1KfynpMbHLgPUM1+7bEkP9Ko1O-nQG+CDjEms0YgFh0+lJbnEGiTiO1OL+5VLc7c+wTUu-GO0Uf5LvLa3M000H7FLAk2-3kH4zbdP7L0WqDyrqjW6k5HPg09LEWkh3xzZiLsokm50sUfqN1BTh2VnOAzaeZie7v0m73F3V+KzFxD-KEQT4UnAil--TVBkRMgWu0HkD3+eK51aFy7DovkjewsYq0MoKXikm+Ewz+1$rGi6DrA-EiuezLtap8+YEB7dC9ApcP0eocGjfvOkX+t7YO7dLlcxzkTWO$$k-YfLl3H7xHYOqCkocdd4k5DByeVax0YgL0jYYO4XYJ3m3$OKjhc2$2fQYfpcT5qeYB6leKQDbs5VnKvYvJm3dY+QnePL8WF3c85gdi1cpPc8Y-959r5JOOKZEv0CglaxnYwaxJOkrhH5bJXJ-z0yqvrxZ-+YELTCb-K0j768i8dxEN1ALU0PfW-awzkk-0yaO7Yv211z-EqaTrQ-G5ALSPl7D0isFo8H3kxmxga17FJLyvdqvgSAbnLoLFJB-srgfpKzM0OxV+FHEfQy6WiTsOTv09Ytv2h0tFlYo0$tOnij8fkF7z5WfSyHfLJtcY704fCAhs-+LgOZh$Yr2AvXzJf08-dkOT5e1V+JBu5xTKPP8H2MXgaCwTMRhskc3B52iaARQ8V83w7TYCVRy2bV4MUv0J0TAw2h$e8qpnRgQOFfy8HWUDnNyDATBeULb5$MYkoA8RhZHY-GB0n8ADf4xEltoqafUAxnhewAdsD3ptrP9Ym5Ak0QNbWfnTE8jMJX-1+1kPRhPtO1OL9H$t5NVdUOeBnzC3aPR4l6mtwBrQJo924l6Hd0h7nUfbNbQ18Ji-u5w7WodVKBU9Mg0r55RrTL04hqGY6O4N3lnjF0HBbHf1pb0v8UTKmnPo92rg-7v-hu5LkH2Fu5O1VtoEAA92+wYmTBnm5LyyZFuHeEMnQEK0emz9KQOkgyEJTryjwi+XysSChjjW-6FCc8hE0uTYu2WKMCd-eFWfs-Vk6rQBMHimGPcbdqQ6dKK+7-3cymJBcdHvA$+DR41Ke-jqPLDLs1Uqtq1nKaE+vjoJ5lT8VnMEPQDJe+QuJGqcsCGW-bv5SkgMF+bLxg3+004eKZEwf6p5svp14issWd9grw5+4AgkUnLlgAex041nTUxJjpW7p3QKimEPdBjY9KociKkUHrt6mwjFLrMxqTTFgB0vG-CKxhJTST-Z01wgdp5WpK-WZLvXF0SCl0FuiitOiLHJUrC5CiW88wiDuaO1EgV9ZMwOAztO1-xhQvHxfgj+xoz3KaQxkXKaEb-BJmOmWwRqchN-1SYamfk0d4JaFEh7fmXOBHCU8AShAuLF4te6CyoJT-OmMwt0nkPkKn1C8MU6T3twy2p0TvbXvxTOBo92rLY5LEHdAAoHgxe1NOC6SyDLtEyEep6Uhu5S0250z5uwR7s6RLaHLRY4C5vlxkYJkX7Dv-GAKc$tF+58kxzrC2AwLgnW7m-qels7W+f70rDDtTtdAiZPRXj0rni$u5tFWy5npVGcgasBtVQKUeEwu315jLZs4dmfx1C4QPdoeF82bOV3g5mTWd-AYUX$gWUgdV1cCec8nlVcZe4dede9s+cgclLSs7CLUwQai6bT4RAypFL7lghhvn2BsxXJJv9EArc-Uyfx0hzdJjO9WHyfhtjY1OlQdkAFeL-s+kOU+ugAzR16u0rUGPAP4KHUtHM10syNnE70$JFlmhlv$bVuYwLily07Au2XJmbOM-DCPATS38Y3UxvrSnxh247Fo-UvpdTvldKJfM4Sv95BywUWHxBcisnSxAfDq4Pl4Bv$6gfNp7RfPXDMZGTGTBHYfWOzlQUyytBVexwX1Q5U+GM55Af6X3MXsvGJbq30B4X-ECwLXebAmCXHlrO3oTS+XmuXtTwoAdVBbTLqrbK16Conc+RpmwlvW64nTSr9P1d1BZS1oD7F9ijXHv$yHGJSb0lmXHlTEaGgDb0lwX7y+EkrJ1BN776kWsE7sx1ykxVOlKYEyyw-7vxD4sK3OcvaD+Rx5XrKE6CLtbPTaW4OKbSUFpqpbxGdnEFSuLDPbTQwXFvpE344cBp7e6utccPvoq+blsRE0iEQGg6B5xRvYyCESFDz+Qfx4Yy6ECGml5QZWJHvDE2daA+vmaXghDSWeL3LqfeaRdkPcwHgbwHtavyeaeU2DWepAOSHfPZda1Wcpo6QHLPZdR-OqpoX5y8PsrU1hCDYT7WwPTrG1+yfr6XyW0XrUABNmokcyVOV5oKOcpHOXvnURGZi7Ufv0plFSurRb3hmrSKKlSFXdJEflRJHvoDWY7MBYpF6WvfDcvaCrYpOaRlvDEYrhXJmvaUypUCGsCVfmrnfWE6uXslhfDyO$zBUU0PhWSfG6Y7RDbnClbAl36xW4clEFTiNKSOH0N5OTRoODDagAzoO0dvw8Cd+LtKT7SkWx1DDCTdy$kFsEsjrYx-Dv3Le0PYEOLb0UHsSVUboWDcJ-+6$kMa07eVSmWyzN65akpjk3pu-L$-$t8Bv$irZgvVDf5JPAeebZ5zhPLemDlnmh6xkV0Lne7i0001aF2t7-p8ecu-ZkB7OrPC8VWXkH7Ksh-FxFaqj0DeGtPYeptf1u+wk$2kg0i131r6fS000UXL1kf0c5q-eo8R-Nqi0ACyaHEgAHPqG5sTDAyd-b0gLS5UOJg8peUSSdCBb0BY8fLa0AG00ELeLV00-H046Kps-DeRvy+bTLT0TdrG8-+0OUHKpG1dGYBGpM46lmPZOLq082kt-MDj0yG00Z-MmPR559BvT7jqMfSkT0t0L0144lQCZ9Qa+S018qkLaLwkt$rbzw35cJ0Fq6kF2G0-8QSRFumng05bEez3LgGR0Ce972$fLLF+Bvy+7T00Exy7v7n4ATFYL0v$TDbUk0ZQF0s-K5MbkEhBFD-ilG0z0EmqTLkdeEiT-ack6Q561XkaODN3ZJ+dkcRqZg0OVSFJ-60gkG$BeLo-L0-hovxk9vfQhj7r0435CoC3gj68lcxkRSF2wT2aLPzKGV2G5L0Dy-gR-EoBwJ2aEBO2LX0Z$BQ2ne-Ys3XkD0r0-j7k03SL7f04pS0i0LaL1c50L0-fE-ehJshGQztHtXJ8-7YugxEsvt6-1-5wtdqhep5P9pFcF0X0y-$m4kFYJo-goBQXkgGQvzeFo0BQL+XvxRcQMR-y+00Yq3ufLOeYurbSxkQu$pG2l8b9lgaeGYBp2QH15A-wD0LBBQEF25-orZ000mpQy00"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 2bvEvtHM+4qzZOF8JW/Bdw==$Pv7kPMMy/gfECYOxtRWWiQ==\r\nset-cookie: cf_clearance=cNlei3mTBeyxnUxWjl2lgFoHnSTjPGanqvr3mglUz14-1774379327-1.2.1.1-A.fsMd6HPZ.Wz2WsSYJ0JpZ5kj4NaIrYy5BkdOcVxkMOlKV3nCY85ySNQaM4JTyOWeHWA0dq4SPCv8lqCOX160ad0Bh2VpeRYgUQ3ZEgBNFhk23SD6XMNJG5xAE4P2NAtBjSsnyQIRwtedFllynotxckV9cKcf0CKZxTR2VM4hozjjBCStH1WScWQEm2HxwP3ctDvVdpAXm6O7MH4zfFv6otHh.q1GKEVi.U9wOdeCE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=snote.vip; Expires=Wed, 24 Mar 2027 19:08:47 GMT\r\ntiming-allow-origin: https://snote.vip\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e17f76e0d9a902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T22:14:49.392477Z","times_seen":15300628,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snote.vip/tinymce/tinymce.min.js","fqdn":"snote.vip","domain":"snote.vip","tld":"vip"},"ip":{"addr":"104.26.14.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snote.vip/notes/nhomvip","date":"2026-03-24T19:08:47.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snote.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:40:08 GMT","end":"Fri, 29 May 2026 18:38:57 GMT"},"fingerprint":{"sha1":"CF:C6:FC:C9:12:90:65:D2:94:AA:8D:05:E0:A0:AB:4E:F0:0A:9C:3D","sha256":"53:F9:81:69:12:D1:61:BC:FA:9F:98:59:B0:3A:EE:6C:D6:48:8F:B9:8B:C2:4B:9D:90:41:EC:90:87:8C:F3:3C"}}},"request":{"raw":"GET /tinymce/tinymce.min.js HTTP/1.1\r\nHost: snote.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snote.vip/notes/nhomvip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InlPanJ3TDFHNWtnd2dFVEdEUk1tXC9BPT0iLCJ2YWx1ZSI6Im9QRVpLR0JPaWVKbys5aEFFTzhcL3VabGZtWnlHSWxzVjM2NFp0MmM2RkI5d1VcL0w0anJMN1FWeThGb3pLeHJVbCIsIm1hYyI6ImViY2RlMDk4MWU0YWMyMTYwMDE3OWFlYmY3MmE4ZDViYzBmZGFmZGNhY2YxNTE3OTliMDM1ZGYwNjE1MmUxYjMifQ%3D%3D; online_notepad_session=eyJpdiI6IlZrcitnR3hoaExhUTNEWEpuWHNNWmc9PSIsInZhbHVlIjoiUXFpZFVVQWpNY01SRVBsb2dIbVdQNHlZSGh1UjFpWFZFcmpvWklmaFRaZUZmZWg2SlwvWHFxdXBIUFpaWk9jeWYiLCJtYWMiOiIwM2UxNDA3NTc1MzI1YmJjNDRhZTFhMjcxZmU3NjY5NmI2MzZmNDkwMWQ0YjU0MDE3MjY0OTI3YWVkN2I3MmRhIn0%3D; view-note=eyJpdiI6IjBnVktEeUZRZkFjekI1ZUwydVVNbnc9PSIsInZhbHVlIjoid3h0bHg4dEtOV0NRQUJDZjZ5SmdIRDNsemUzVEFGT0NYXC9UdFpMNEJLYjExT3hScVM1eTVYb2t6N1lMbmphNU8iLCJtYWMiOiJiMWQyZGNkZGYzNjU0OTQ2ZjEyYjAzMDY4MzM2OGQ1ZGQ2M2Y4Yjg0MDI3NjkzOGNhOTFiZmRhMzMzMmZjNjRkIn0%3D; 8RAa6PkTBEj6rJbINMzqr96R3jsyRTUNaKTs6cfy=eyJpdiI6Im9tY1FnTjZqWFJ3Qm1Cb1BEalNVOVE9PSIsInZhbHVlIjoiWnZ5NElvVDJNTWlYN01VMVBjajNlR0NmaytxRWd5OTVra2lkXC9paFVpcmNyZHMzUncrNVNmVlg5YmpwUkVRcTZVSkJ4VTRFdUphNEY1VzJVZjhsa25Ec2lITE9nU3RPcW1mTDZrMzhZb3gyY1wvXC91OXhZcjg5ZHhPNGp3RE45YzJtK1A3aEhGUlFveXExWWNacnYyaTJGOUpWaFwvS3JwMzRUaUg1Y2NDUnpTUEJrSzNMSDhyUklXVGUyMmJhSWxOa0tHNlwvVGFTSkdTR01OWG9oTjF5Z0o4d0pWR1U5S3RWTkxxcWZPcnc3QWhUd0JYZGdCOVVzTWRCS3FobnBYQm9EdXBlXC9EcWE0TUQzTmlqSEYrNTRja0s2bFNYNVVMdXBreGNkMXFrajhaNnlreFpISjRVb1E0dmV6U0xUVmdVT0tsS0l3MHl2ek5BakdYb2lNNmJxZ29BPT0iLCJtYWMiOiI3NjAzM2YxNWJlNjM3MmNjOWU5YTk1YjUwMTQ5YjgzOTBlNmQwNzc4Y2NjYzM5NjE2NDhlZTA3MDRhMzQ3ZTRkIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 19:08:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:42:28 GMT\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"67d28c64-55456\"\r\nexpires: Tue, 31 Mar 2026 02:44:11 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 59075\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRQKyRr%2FxqGGIvpvEsJpR6RlM5G7MK8NeF%2FlCpPnMyTEqJE9W9q9lqTdztieLwyY1zRhoPP2Aw2QbnDBhol8JOBpX5fpy2SrtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9e17f76afca4902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349270,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65513)","md5":"2eacf8ed047073f7fae4894d042377ae","sha1":"7f97bbd2ed9f86d394770ba416d4c9a6d5bc7934","sha256":"89b560de72ecd035f5d13eebfc6c4a67374bb2ac864c3cd5050bfd5a6c503add","sha512":"552e0d6eb68f843302d21dd82725b40e70fa14a48e24f78474c405b484d125adff7c6b3b99ec77a8f6c9c16d9c1a7036c1ba1a0c2e740c671a5b989806608760","ssdeep":"6144:n/VEWJDR3w6KCSTCmiyl61hBkCrzsn3Hzk:td3TKFTIl5kCrzsng","tlshash":"cc7408dd36c1b03263a771b9007f200af23b5d55680e8910e636d4e97c7998e936bfad","first_seen":"2023-03-07T22:19:22Z","last_seen":"2026-05-16T22:20:36.540662Z","times_seen":286,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"snote.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}