{"report_id":"d01aecdc-8efa-49a2-8f7b-c5b32ee22aee","version":6,"status":"done","tags":[],"date":"2026-02-13T20:54:05Z","url":{"schema":"https","addr":"auras.cfd/","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"auras.cfd/","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"title":"Auras Casino Games \u0026 Sports Betting | Play and Win Online","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"auras.cfd/","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T20:54:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"auras.cfd","ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-02-13T20:54:11.410999Z","last_seen":"2026-02-13T20:54:11.410999Z","alert_count":138,"request_count":138,"received_data":20431087,"sent_data":62668,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"gulfstreamgame.com","ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-22","domain_rank":0,"first_seen":"2026-01-24T14:43:26.704131Z","last_seen":"2026-02-12T20:35:52.459323Z","alert_count":0,"request_count":8,"received_data":4379901,"sent_data":3606,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/cae916aab1a61617.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90203a7f5cb3cc5af6c182dfd6d00a56","sha1":"03a1973dedc17842bce22e84edf63834e9262047","sha256":"64bf2521fb0100317768a713ce65d634a74945a317f0888d666263866b614711","sha512":"40b613c9080427cace4386b9ae2fb71c36ffbeca6009f1560c603372f0636a63326c24a6061d9619dd0dde009435087681530cfb1bed145bf7ce322b55ce894e","ssdeep":"192:qQ2sLHXYsP8oU+XkXvNpbNaKHVeme7FO5B8fprfUvXJASuit0l:As7n8oUiaNZNx+Q+pbUk","tlshash":"aa32651b962031be0692fa93a65f3593773ef0e43a02e59ccfadc0581359c6b41365f9","size":11006,"data":"","first_seen":"2026-02-01T14:00:57.541104Z","last_seen":"2026-02-27T13:26:05.315119Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/fca43ff19ca84387.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"855a8aaa259c9f21a6b02af8cb97a58c","sha1":"aa42585d7e5a72a628c335b8f51c1847392b28a9","sha256":"284d8ae72633a59ea67dfc7e98f008a06839799d1b63caa791bb8fbda1d6c5f2","sha512":"bd5f4cfb8debef8aadbeb4a3a03806d893c7f49edcdfee31036e53832d5d169707c52d955558889ebc1d82288795d6b91e613ed186f60f70ce4f0f2e525ac70c","ssdeep":"","tlshash":"7b111c840ea4b47c2557120878f36781b07c0666e19a708e8ccf475cc2f9b38992f3b0","size":937,"data":"","first_seen":"2026-02-01T14:00:57.583606Z","last_seen":"2026-04-09T01:34:11.950215Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/bd84bd126a31c6d7.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f5c682e79c6a7641a935d9dd9410dde","sha1":"a0975509f7466716edf5511e298f74f9f0fec7e9","sha256":"a3a928e75de69d8e8cf72da2d3ad2eab8b47a018c2bd8fad71794067d9d78fd0","sha512":"bac8698096fdd6a04c0577946a5366ecb06d20fb0c5619dc4c012404d0a89ee8807281632f8a7e516b95b6d267028ed85a9893df2102f264db2eee652ddc3b22","ssdeep":"","tlshash":"c6f0d4e74651d0a200d436acb1335e5e38e511598f4dee77e5690f7413f131bf9025b5","size":500,"data":"","first_seen":"2026-01-13T13:58:34.411554Z","last_seen":"2026-04-09T01:34:11.951281Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ede46ed25a51b417.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e5bb589cc16ca039001c07057fb28a4","sha1":"b5665dbca43c796f3868939e426cac74de709bb7","sha256":"27c2297ad708af95d246e037e0c5c910a07c70e3b59b9ebf2ac7255b99e158df","sha512":"01d2f9c51d846d37efe2b5582ffaeffb7517cae07fdf62b5c846170c9bd299c419b35621941f4a5389c031aed1770fc1eb24ff26f0d35243824655bafa8136b6","ssdeep":"","tlshash":"7941451e0e04fd9406562168adaade6c70a4421d90e2ec4caddd07e863ee35d453f73c","size":2318,"data":"","first_seen":"2026-02-13T20:54:22.138532Z","last_seen":"2026-04-09T01:34:11.936296Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3f2df0a9f0c8c9b6.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7cf8464e534d3fe0cfdad902d310489","sha1":"b947e51380452c9370cbaaee8cd1915d6573423e","sha256":"8177effe603ef1689fce7859cf54d6fc4afaeef8430affe1c7c280818dcf641c","sha512":"81707a3c7ab33a871430e6daf613da508a3e628d6a4a8774a1b491ca74c7498678c97026ad579f347f31fd816e74060626b3599ca02a2dc6beac91ad3ca2ec8b","ssdeep":"768:s6lPc9kgRKuW2haDtDR6P+WE8uW29mIQ755:Plk+gRKuW2+lWiW20I655","tlshash":"9a03e92fe75a237707c302d63acb4adaf37aa05837b69594c858c24c1396f6c8337665","size":40016,"data":"","first_seen":"2026-02-12T20:36:03.452939Z","last_seen":"2026-04-09T01:34:11.900083Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T13:11:47.786184Z","times_seen":363075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/688e3261a170e82c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d785f903b3ed880dda3443db0b0506","sha1":"94bc3d7edf03cba2bbc9d9d1e701d13f71c54efb","sha256":"aa5fa196a32fbbcfcdda28edba4b1bddfa4b6daaa00360f74dae538ac06768b3","sha512":"06c6405b2d9cb690812272aa203d224c706906f81bd9251be95570576274445a2f7196b6aff054b648f74ecda9baca5ab46c08a4ccb53e2d395873e07820c663","ssdeep":"384:O7Cla6CWCmLgG4AYHfcseD1ePEbKDRb1Jn/hHh4vTAfmUb2ZznojLD4qtgQZrIuV:ZlaJzRn/x/2xCLD4qtgQZrIm","tlshash":"e103b5b572d4faa2029344f0d83f100af23d4c7621adb4b0a7e4dcdb799458d92b6f99","size":40063,"data":"","first_seen":"2026-01-24T14:43:36.951166Z","last_seen":"2026-04-09T01:34:11.858554Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/9b2ea8df5b4476c5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"228fbf4a9ff27aae2ce0c71b7cb71ca4","sha1":"73e6c3249b5c04e36d45c303667adc096443d39b","sha256":"34364711736fdb7a1102c064cf33a618c556d83c2361b06b4df1d214ff10c109","sha512":"5dbe7854729f44233d486e5d7eabcd1beb556feeda537c7c74ac394497a6fcf1577fa2cd8f4298462b6a10a3dda081fc07583f70d25f91d9d2b1e1dfb0a36074","ssdeep":"1536:mkcDwFijRV1pOak4axZPh1HEmEMoejTUGwL3vaaCs0uhWhkS22YgKID:/cl1pOVRxZPh1HEmEMoejTUGo3vne","tlshash":"1fa32a94719333670b8fa2c5586512489e7aea64404c581ff6acade38891d8e73fff70","size":99529,"data":"","first_seen":"2026-02-12T20:36:03.583419Z","last_seen":"2026-04-09T01:34:11.866046Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/4c256775dea270da.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ee70ea383424bd00eb0b2c1d6d17232","sha1":"244cbc3e2f69ae1446d4520081b68339937cc883","sha256":"b8646432b01557bb5af3c7a28b37ff02c2bc5750b9592b637a8d93609e9f613b","sha512":"1d0f4408c726bb456c7f5f4b721f7aaf42eb41e2ad989cb6691d8c8f41c88f686bccf1e964598a325cd7f5dc1a3dfdb2a4be4726582379f4265ccc4205fd1bdd","ssdeep":"","tlshash":"ece026134107e5dd0067534ce13633bb20382bb69b4e342b914d1594d17865464cbd7c","size":340,"data":"","first_seen":"2026-01-13T13:58:34.468178Z","last_seen":"2026-05-28T13:56:00.762912Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/81c836af9f9b281f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88fc2741c51a428c589e5dd95f2e6593","sha1":"27ce73922a6530fdf92133454b54e4b6e8624009","sha256":"52f1bfbc0f217c64485369eab5c4ba250b22e8bad9fd90cbe1f5ae0b13df4704","sha512":"6c7c6d48e3bbfd92965763bbb748f5f7124c11dfc9c1a5e124b0392e47c95d853ac2a96d9db57fdd9b545359e9a030a2036a42d810bee8bd93d1237b0c3354ec","ssdeep":"","tlshash":"bf31a80d484b4eac5921663035c37f6e746c1cd291d6a805c97d877832bbe4cb587e29","size":1704,"data":"","first_seen":"2026-01-24T14:43:36.877112Z","last_seen":"2026-04-09T01:34:11.933103Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3f787267c4bb3269.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a70e838cb6c236474e4ed529f94ae28","sha1":"46cf97324f59980177e1693482609bb8632017e0","sha256":"3370ed272581b16bc4c49faa4a2984a010ef8de7a3b64d3803304319dfd796d0","sha512":"b6b5c156d9a6d1fb133df35aad8c76184bdca5d18faf5bb0cde0bf8b7fe7a7a15bed51d0fdf77f92029035b9aa53f3ff1f9d9e4156ccc2449bcc20ce7e465811","ssdeep":"","tlshash":"03f09e2809516dcd1c057a7cb864af46317418a640dd8e1c2afd4cf892f7f44d8250a8","size":508,"data":"","first_seen":"2026-01-13T13:58:34.39722Z","last_seen":"2026-03-15T20:04:55.02275Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0724a67b1049c331.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8ed1e5a4e1eeb82187df4f73f81b67a","sha1":"3e4c31819d546cbbfcaa68995b6de6bfbe7f882d","sha256":"8f370376066d4038065c26c3324ce7b7ef3fcedb5a296e43c444185dcf797731","sha512":"3a23c32b5efcd69f34ecab6a1801b5aa5b0813dbad556605f4ada6526432bcdbb08b313a206439f7fd52daf012671bfaa844803d1ac04cc930481f06f873320a","ssdeep":"","tlshash":"50c022286885e03a0188a4c8f0620614b84c38a8a64c540e903f88788061b18104008a","size":192,"data":"","first_seen":"2026-01-13T13:58:34.472217Z","last_seen":"2026-05-28T13:56:00.765298Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/2bc53bbfaac611ff.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb3b5cce160f2d44444de994c9921c40","sha1":"9813bfdff1e5ee5e8744374a3f6a1bb9d6f5df40","sha256":"abd06ab35cca99c1cf56473e473187d8b7b6ea3a062f4af970cc2000b3b1dd80","sha512":"a6577f4fa3ff6e5b20200bfc7c1df1b3efcf4d320c5992426caff2e37eb19393f7c7a6e4953f3ee4f60620accb1180978e02c5b9340a912b125356557041448f","ssdeep":"","tlshash":"b7d02b703150f8d44086a0cc8836424bf53a757262fe3495d7ae8cf16174f5d51e1a55","size":283,"data":"","first_seen":"2026-01-13T13:58:34.452804Z","last_seen":"2026-05-28T13:56:00.633322Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f7ef9989b79cb92ea4c3717cd92bf60","sha1":"adbe8b2fc29112d61b98440a131645c748ffbcf1","sha256":"4dcbf3dddfd1dbae15a04bb1f70e3695ed132cbdd72810a5cc15c8bc1c8c3d5d","sha512":"571726da44aea618806a45c41b7a482e3faedbbbfc083f392d402a748aed35e3a71a1affb8d9bf9062ffb50ca6020f1bc77fad9c9cf4cff84963fd268efa2123","ssdeep":"","tlshash":"53d08cac009b8231b2bb606a9bef7589a452009f3541e4523c0c92082fd4b6f03719cd","size":210,"data":"","first_seen":"2026-01-13T13:58:34.529264Z","last_seen":"2026-05-09T07:37:37.090978Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/56604a82a993fe8f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eb6e3c929df6cbe6bb340a68a27a591","sha1":"46c44cd8619a39864e91c811fbf91c6fa9270d7e","sha256":"904c4dc09a88fd81921baf9cd2fd908e73b62d1f6716c6795f5b0b6cde73ca8d","sha512":"141360b9ac89324ddb713a8950ef2b1a4b604f72a0bae0a182d4760f9fc2b5c861dd7e890b3a6ba858d4b1cf3edbb907698707f88b3c2035db1ecd5b5ee08928","ssdeep":"","tlshash":"4631a50e2614a97a4b40027a398bea4670fc24c50577bc14e9fd434c13a87bc72a186e","size":1826,"data":"","first_seen":"2026-02-12T20:36:03.635175Z","last_seen":"2026-04-09T01:34:11.911881Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ad6b1ddcec4cb5a8.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca8f72b0dff0b15a2220eb717b98488b","sha1":"2bc25662a117a508adce9ff8df2e544624819aa6","sha256":"fa54491e1ebe956f011cca158d6b94328f6596e9f3373dc942dda8a3122679bd","sha512":"db4646dc6dadb068f9f74ee85ce47beec97e71cbc1c97f5ab36dee3c9b08ebeb652f4d710ed1407dd37f0f9156957a0b7674cd520d1625d58686191f3511015f","ssdeep":"96:At273n7i7i7HSK7ViTiEkMxzO2k+NepInmPKI+j2w1Ux4gxaPDvo04n+MLSObghu:PLWWLSK7VWVxg+nqR4g4bvt4+Muh58","tlshash":"37b1c9179364319a0bf70268a19b39d5ab390c16b301c884dc59422c73ee5fdc77afaa","size":5383,"data":"","first_seen":"2026-02-12T20:36:03.607191Z","last_seen":"2026-04-09T01:34:11.878899Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/aea6d8ed908afa0d.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d2e23f6d8c9c4a994917eaafe374872","sha1":"9032c9f3b9c766447a473b8ac1ec8e54e5b32685","sha256":"4446b6c924429a47d7e7901971e98d3930a9d17c1b9588568a4af4436a9a827f","sha512":"260ad26d28f4e64fd12970f9d5b26fa252c6cf90fee43df8d843bb7731b716a1ef5fe58927d000c3da920b365b10fd77025ce1fdde6176d121714bb104501780","ssdeep":"96:tk6BEmzi5fGN1u6HbRJuh4nUPomOoxTcekt1u7SrS8+xipty0sO/83gPAUCHnw9x:tkEEmzi5f6j7j04wOAGtcSrS8+x6tycV","tlshash":"1fb19517b718326a07d34051baef859da37955247371a9aa5ea8c31c13a21bd93333c9","size":5419,"data":"","first_seen":"2026-01-13T13:58:34.455977Z","last_seen":"2026-03-15T20:04:55.125738Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3bf9612b3348457c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66b74967a779809565ee6bf2ee6b5b65","sha1":"f1089c9350d314e3802541ea297c22765ee890e5","sha256":"0ae3c7949f0b8568f400c953f0659ca5902499840c7029f0b1f904d83ebb4456","sha512":"49e8234f54190f060a2a7d0e239cfb34758d209d114623e9c90d391513e7cdcf9a302979affd6bb028154a80ddbe76967e8dd022ffeb7b959d0fc274dfe48223","ssdeep":"","tlshash":"0dd0a7596481dd3c1808529de662332a34a534b5618e2406d01eddb05274f5895405c9","size":241,"data":"","first_seen":"2026-01-13T13:58:34.43815Z","last_seen":"2026-05-28T13:56:00.598157Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/c27b67ef6a0f108f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff0eb9aabbdb9fdc6ad98252b61c506e","sha1":"0eba3616a5030214482282cc168b067b5cb8c4d2","sha256":"c44cf68447b11b233ac9a9fc6ae9971e30f6fa7947a68e75ff0d8d319b567ca7","sha512":"2a7d015993fc6f1f48688f90725641fdef481eeac34eaaafb4c95235159af212e574526e874aa5d8b8f00777308b2b841bade1f9bddc66318f53b99c23d3affd","ssdeep":"","tlshash":"7a01cb16404aa9f41403532ce596333e76380ea7c0b7260be15f272ad1f0d58628b238","size":695,"data":"","first_seen":"2026-01-13T13:58:34.497392Z","last_seen":"2026-04-09T01:34:11.899423Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0ae4c2ebbf3c8f80.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f786781fa0139399c4b07c3def81cb2c","sha1":"f12b9cf0bd3b8d42aa3dc179629d4e8fc203b199","sha256":"95b2e8a5d1a8e35d518f660e97770d8ff83f17b62bc103c9b19959ea924db102","sha512":"e59b1cac732294942803051c56bda51d0d360e90f1320cd3e6f7722978b53d31d2092aab9ebe57e0e1750da96aaad3cbc3c9843fe88c8518eeedc37cb983bcb4","ssdeep":"384:GdEvy3EVWntvPSBAXKfoPnXBdY8+RO5yKNFaiEMEEgYAvJ9JU+k76DWAC/+kp+Vx:rkWE+k9NQFJg76rgp+Kbe4F32","tlshash":"cef218d8b2c3b028123364a9007f7117713ebd25641d8943e52bd8d57cb6e9a923bfb9","size":36312,"data":"","first_seen":"2026-02-12T20:36:03.574035Z","last_seen":"2026-05-28T13:56:00.663868Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ae27942b7096491c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"822da84f8ac41fc80b5fd0783c88b282","sha1":"56e1ac390f64ced857c1daecced8fd5104330e30","sha256":"2523768f0fe0ed586a3d42ac371eaa76eb5d00e5058c7376dfb3e14d4707ae5a","sha512":"fda5f5359cbb1a7acb4f4c325841c6dcd27b92a25cf250edf0f84fa9e5dc7bc809de085322ed336f768e911bf0d0f000637b6332ebb2724cf173fdd71e1401a1","ssdeep":"","tlshash":"4d41349bc509961a1bd3432efcc15a86bb36211a8eeb25070dc9466302607bce35b2f0","size":1978,"data":"","first_seen":"2026-01-13T13:58:34.516024Z","last_seen":"2026-04-09T01:34:11.903751Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/bd8134abc73ad514.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"165fd581909f5aa34a58fd0f0e2227ba","sha1":"47c3422224dc5d6e6a4c0ca212371377b5906bc1","sha256":"081a4e70046edc5780986ed69069643bef45245d59715cfea62414327886561e","sha512":"d8ca8ad25cc830ba7d27f152846910b66934cf86735f6e0dc9542310a63b4fe3707767921c9600071a75f576e427cdb839ae2be85d22766e221c652984ad970d","ssdeep":"","tlshash":"00e0686d0a456ca82a01e69cb52f57a471b7209e40ee6800da8d8efc6532f3e0b46016","size":379,"data":"","first_seen":"2026-01-13T13:58:34.516843Z","last_seen":"2026-04-09T01:34:11.881115Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3ac6af060d8f1875.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28f8e2b2cf927da287390f7329f7dd4d","sha1":"2ae344339647c5cc33c06beff790a01b60b2d4a9","sha256":"ce46eaa429de0321592363232270431494bfc2661b2bc89f9d10f85f5c596bbf","sha512":"dd71baac3e3f8c119f3025b5da9d13a3fa4de5abba955fb33f32d58cddc0581d50e189f7c660a73885a0d4b5bc64d1acd4f82803c6ebc4016dec5795b29ab1b0","ssdeep":"","tlshash":"29e0c265c459f58820843688687186ee3a192025d5dc245bcaea0bb4a2f5a78808c26c","size":297,"data":"","first_seen":"2026-01-13T13:58:34.523199Z","last_seen":"2026-04-09T01:34:11.900623Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/turbopack-67b6a3e8a95fdcb2.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"432a4b6b685da118c4f96b9b4a38cdc0","sha1":"e03481bed34a618b1c798b18980de607e36720c3","sha256":"3779233948512f2041b7ecc1cdebe3446d4f4f9cad0ea22e20a8cd16ba277d53","sha512":"f12e0be1ffd130a534b7b2a4e0d3ac2ce342a1964dc9dcbc2f97fb70f0a8f97ea07b3e7cbe05165970ed7cb34b29b7fc638e2b077cff30552745db9e0cbc2ef2","ssdeep":"192:2X/IwHG+J8iEsuRn6EY8iaWkUmlGVhFd2mcKW9PZPKFXVqXmZ:2X/IwHhyXWkUmlQ8mcDZZyd","tlshash":"8622c7da37a6f07343afa1e7803f4144f1798869146d581c939ca8fa28784ae45e3f37","size":9946,"data":"","first_seen":"2026-01-24T14:43:36.897452Z","last_seen":"2026-04-09T01:34:11.85938Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/10a6f40673bc6d45.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55536f33f6535c10478ef81aed3c13a","sha1":"b004d2c8050b6ddf653bf1c2ab5bf4b85f01c5db","sha256":"c64703d1e73a9e608c727aaf43c5e8531d2938908641b4b55f8a42407d81b1e1","sha512":"e63ef5680b5832c467ae7ebb1facc410edd29bc9d25161241bb17c3fbec2ee95701400800fe4d9d69d65948e56d79afcdccd47552092c0a1c4329d4d5317895e","ssdeep":"768:hVWDmHlOs82KywJr8EU6KtsdDvdw4puQ1BCbeAvrtmaP8apfG47q6FyX4tN5ualO:Wap54FEK+Dr0fgTua/PCo3lTfqR","tlshash":"d683d6f936d0f8920bab45a6c47f0005f32c4d37245e78a4a3e5ddda316455ee0e2faa","size":85617,"data":"","first_seen":"2026-01-13T13:58:34.459189Z","last_seen":"2026-05-28T13:56:00.702236Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0aaf085a7f1a0239.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6280fd173e475fb620e7ac1222571eb6","sha1":"07f64e6f4ceb0a0f3449381760971e09744b55ab","sha256":"acd430bf0397e22d565867188fb1373710eb3020e31d68f9e53ac1581d05da5c","sha512":"4728c9b6154b0422f8bdae7e63a6b5e80cadcf272d35b21b4f9e14227c94ca8ce7a47d161eabbfa61e68882f5010c069bfae4e8102f67a771131c3fdb11ca68d","ssdeep":"","tlshash":"4311231e95194a0a0d99c5cc34de662870dced2b4dcb04056ceccb9c32bbf41f1568eb","size":890,"data":"","first_seen":"2026-01-13T13:58:34.4619Z","last_seen":"2026-04-09T01:34:11.946594Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/e1042c89d2cd85f4.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ae144f1fd17ea24a3437c9e34f8e4fb","sha1":"833cfd723e5add0e7a3e97851942b5309a34c059","sha256":"22d7b075d6ae6d440287ae2f66d8da2613294d16c3ff8742c843300f520c4045","sha512":"b6cd4ff980a8143de7f539a165d1de7fc7a9c8726fb9875824644d72d1505d8ace2f5693265860b7f55ff6b1e339ed880bd2f0148701eaa496e172c5ca2112a6","ssdeep":"","tlshash":"abc0803548c1c4ac610525ccf5775765b46c2474d1dd1419d17e5e759165f2c594118c","size":183,"data":"","first_seen":"2026-01-13T13:58:34.404211Z","last_seen":"2026-05-28T13:56:00.714041Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3a6b01cfeb015c57.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"849d648c329865aa5ed3f1e2c14d059c","sha1":"880d8199047079dfaf661f6acec42a9637f7c6da","sha256":"1b00d35ff042cf7523b58bd3c8cbe2f2a281d72d340cc0733de0c702582b8ea6","sha512":"36dcd98a083317d0b14f908143dda335a9c93fbdd9bf73ef43245dffab6f719a6abddced0a10eb156cae1b4b1a9e52f9da309873cbdb2cdf30e5aebba284bfa9","ssdeep":"384:cJsgw7D8RoKa9otOelHwd9OcrqkYPE4cZUWu67YrNg76Y9K:cJkDKtOelHwd9OBM4cqp672KHK","tlshash":"81b2f9ccb193b0201663925650bf510bb1bd2d5ca58ec058f576d4ee2ab798d6333fb8","size":24426,"data":"","first_seen":"2026-01-13T13:58:34.519367Z","last_seen":"2026-05-28T13:56:00.661898Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-06-07T12:35:25.07119Z","times_seen":52871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/2d3894a523d29c3c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"890051a2f5ba194f62e0a2247ed852fd","sha1":"90c5c10ea2a46d80ed2cb963e88fc201d9f0bd3e","sha256":"28e065269e96e9d4ef1367a70be5a2cd4327b1a12a611101ace84bd22f90217c","sha512":"081ee2edc9cfc6d88a02cbf810aa184cb5cd4dd59afcd654b638dfbedce9929c4635c3bcb82096521cb3100001f18879c32c90dc16a42c6646fd202e80293492","ssdeep":"","tlshash":"49f0dc6a5e11bba82853006cf82e6394b2382038d32c5508c49ec5b0a179b2bb22a198","size":469,"data":"","first_seen":"2026-01-13T13:58:34.419989Z","last_seen":"2026-04-09T01:34:11.943399Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8f930a8b3cb46897.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b192b337f0c29559d82b0cd04d321993","sha1":"9d0e362c0a91e4d9697138bcb730b85b4d8484d7","sha256":"31de4a951fced7b4390ef1aa19880534c41694301ba2a83657b11d3a05bd5cb3","sha512":"60211d0b03b6f968e15b738db7596a40831763bac184ce9c4b061830f40ba9715af4d667c96c3387072789780920b3ee730251548c66cdc34df5eb131490e7b7","ssdeep":"","tlshash":"c8f0c08cc304706cbc4a13f8f7e59e3d53bc0c95e1d99508a89f4f6c2239519e0aab8c","size":552,"data":"","first_seen":"2026-02-01T14:00:57.533869Z","last_seen":"2026-03-15T20:04:55.158975Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/03fbc1250bf4a7b6.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"441f8c9d4b02e80a247aae360e3c00e5","sha1":"b9927e735deea0cefb878c0198ef58cfd561e589","sha256":"5509a68afac0dc2dc6e67611fcb9c06e539408c53a492b3afd0d9a4b9df5184c","sha512":"45bf68ebd3e1293fa540164ea17f88653a1b7bc2d20c3eb6acaf23f9948090c643984ebd69f7d428529900a4d75f746cc22ab344613d101cf25b28e7076beca6","ssdeep":"","tlshash":"cfe07d9a100784e809c77369b275468830bc20e8643f8032507d846c52b626c9289440","size":305,"data":"","first_seen":"2026-01-13T13:58:34.410052Z","last_seen":"2026-04-09T01:34:11.876408Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3462338d369f835d.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e553e02e168916bc3cb32361065c02d","sha1":"987728d7b21c06dfa8923049b52aca587eeb141c","sha256":"ccd3fb2588cb35bdd6d179460c94c22df80aa3bbc12bcb026b7d4a3fa9a6ada9","sha512":"a289a53e2f36aff190ab1e5d40e4835b81b3d70e5e74bc858ba2d9922f18649ded88da9be77bedf1028a3d56b8f54d78a842f013c70a420b7fe746360b2a8fcb","ssdeep":"","tlshash":"8ef0c9ba8055484c74003b3990e0adc538f819b698facd12bd9e47e8b0bed14a5019ba","size":554,"data":"","first_seen":"2026-01-13T13:58:34.392362Z","last_seen":"2026-05-28T13:56:00.776211Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b459c96aece42f76.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95e4f17dcbacd240532f3b071dbb3c0c","sha1":"8aaa788f29220d2a1e6d615dfd9351ac68319782","sha256":"cebe0294cec954aea28941fbf2b31efd57393f1786f674ae7b3401df70083303","sha512":"25591bb477338a3029b0485fd0c1a3a97cb1af63d76c741c3a4c1a790b0b39de58814ce1635f42bc47c94b9547ce3ad1ccd611272bcd7c83ac6031d2d71094ae","ssdeep":"1536:HQ6bnnxhIb/kOQuXy6rOLh96u8r0x5OnwI1C5:1bnxhIwO7yNhbhH5","tlshash":"c633c75061556aacf65b4195b56fd00cb02ebeacce0bc418b7bc3c792a048c4bad6fd7","size":52898,"data":"","first_seen":"2026-02-13T20:54:22.14589Z","last_seen":"2026-02-14T11:59:15.559743Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/56e67c9087d6a5c8.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a07820d50dd2e88aa5fdbd0a73c52f","sha1":"fa146c4e19d10c1ca936e7a343693326f3d10379","sha256":"73fc269567d6e33502c6d35cfbc3cbf447c2bfed6a5f5272f7825766f0affe79","sha512":"7508160876580439e1a08451f6182cf448581937ccf6ed7fda257645bb804a01ff4cab61af40ba189cbb8ec2f0bcc5e072fd8c6295f69e3d9a60e77ea52f0e7d","ssdeep":"3072:CH/apcwTasn5pRs2naYLlbskmz/pFdE/Y:CHypcwZbll4RxFdE/Y","tlshash":"72240ae83d55f6626ab302b710af1803b33c252b280d4d60a611fd9db57845fb17bf9a","size":213915,"data":"","first_seen":"2026-01-13T13:58:34.394009Z","last_seen":"2026-05-28T13:56:00.613374Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/e58004fa60875eed.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cad4d7ce3ebd47abfdd10fb1ab546a33","sha1":"702aec8e78dc8eda208fa90b29db007f2bf27075","sha256":"c7ad2c547ebca4eac43072506d3ef6f47f2e79ca1e227533a709f8f6244f97ed","sha512":"aecaac8ddb0cc3eaf89e357b85a4b266b5838f3b8f0e6ad4da56048ae3b8ca0b191380161ae4612cd7302bdf740b15a6c7905ad0da21b69047c3239c873538c4","ssdeep":"","tlshash":"f421318d4201ba581013578cb0e22760767d40d9d4ec806dde9d0fc8a1bb138903f9fe","size":1386,"data":"","first_seen":"2026-01-13T13:58:34.409252Z","last_seen":"2026-04-09T01:34:11.905641Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/a8808de2127569cd.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ea1b9253e3ed7089d054435ac46f26e","sha1":"2fa15c822c4ee1b38c308adad8ca16268ffa4d9e","sha256":"a229cd15a12b0326155b70ee20391c72bbf66b3c66f08f56cc11a47ea6dfd2ae","sha512":"4254104610b9e5bc89ecb4de7fcc4e965c3b5ce63e571221fa9fdb76caa29f8a04b5c4da07c1ece73d30ff5524f390728e15ddaa1c45a3526a5d1fd21b6f83d9","ssdeep":"","tlshash":"b31121d4a2875af909ec32183879c526d0f013cd808dc457ceacd12031f3e61bd91791","size":1050,"data":"","first_seen":"2026-01-24T14:43:36.985114Z","last_seen":"2026-04-09T01:34:11.860191Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/6e7332a64713445f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"640bbcc093f54267cb84eaedc629e5b0","sha1":"c1d3cc52ecdf674d8248abfd9540e7632fbaa44f","sha256":"95db70d4b5e2a13349b7b285499ed4f2f3cd1cb5faf089e35e68a3296702f5f3","sha512":"d977fbe41ca2531ff4c86b602ec807a872e89499fbb05f17aacb5d8692502d10617d67c1f0571ba8cb8619122fce6adfcd6717a63c67743728062379d6ed5d39","ssdeep":"","tlshash":"3b216346f50960f70ae973073cdfdebb61ec1044862a04249edecc3d03f0599dc1249a","size":1387,"data":"","first_seen":"2026-01-24T14:43:36.945615Z","last_seen":"2026-04-09T01:34:11.934618Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/aee865646d5860e1.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"219ef309b5647971e066190aae0f3412","sha1":"bef77b2f601015a52c9e4848817f0cf7c1df2ad3","sha256":"e3badaea9d2c9c08613a447a709aa55ed1d67d579989a8f59a21b1185967ca56","sha512":"a47993aacd8833eb12e01231e30e05957b7a49ee93b46546c254243b9e822dd3aa5130a8455d1a2b47e1b333faab29efabf91da4488da132ed3b3d99272d0f29","ssdeep":"","tlshash":"9ad023150113ee0c100760cc703995557c29753211ccf009e05d09735238f6b7191274","size":228,"data":"","first_seen":"2026-01-13T13:58:34.418244Z","last_seen":"2026-04-09T01:34:11.884277Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b5bd3a35e6b5b102.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd0985f639e0ef008b3ff0d1aea89d4b","sha1":"c2a0be0eff482a8f1e3e3d2faf820245f9311022","sha256":"b192c152e4df1a8fd84806aa42fb1757177f671f59e682e5b32c421395e07f6f","sha512":"3d7245482e776ae0facba6c8c02a15b38377953c4b1303bfe33e0290a16f1b7b70bb72649c206c6da36d18ad470a5e5c4e9f36314815e339c05f4e658b98b6d6","ssdeep":"","tlshash":"2471c61bc31872a707d311483eda02ca673aac4d7390c8a8de7c421c33fe1588637b65","size":3544,"data":"","first_seen":"2026-02-01T14:00:57.538934Z","last_seen":"2026-02-27T13:26:05.396803Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ed6a21b61884d08f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0442542e692edaa8fc0e24f76ef11257","sha1":"6e09219f74d7899ff1af0669bb6f0fc50c99fe2e","sha256":"ecd810778e01141a8506a8c43ae45efc9af39db9dcee69d63703908b6698b3f7","sha512":"3fac299901bf52b2e70581205a980a53951baba329e7e50ce4828f3d0abd3881e7eddccb53b60ae41d85aae080385d3fbb2757536d74986338e921142e6e69bf","ssdeep":"","tlshash":"46e0ab6cc0114a691894c49c7ca8a22834297c3f81c99418fafccb6c7536fa2b11969e","size":434,"data":"","first_seen":"2026-01-13T13:58:34.478837Z","last_seen":"2026-04-09T01:34:11.904898Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/f46b8a1c73c0617b.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e1e61acf0ec39c69b58f66064941ce7","sha1":"7fb45e5309b2afed15a3461a3b55dab37b95ac92","sha256":"d1f0a82a2adab5ceab302a8ef6af408340d90f0184b789a7160d6de4dd9b9bc1","sha512":"7a5be9f39ac0668184ed3ad8e2c078da5b6787cdb2245b085f44fc7875b61fdb955d1c0294f43fd76134cbbd7a9b1f9f7db74ee2536ca56c7cbaa410c7e03917","ssdeep":"768:q5Mvs8TRqnxRxdP9lsJr4fKT1LpvwutT8kxBMh8iuX:Y8TUnDxdDWr4fKxLpvwutT8WBQuX","tlshash":"3023c5e931d5f48107a780e5c42f101bf23e4e36149d64a0e3a2cde979b495de273faa","size":47590,"data":"","first_seen":"2026-01-13T13:58:34.511503Z","last_seen":"2026-05-28T13:56:00.659469Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/5e9b0ec455fb6ee3.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c879ff8280498538cf3276f8ab0de27","sha1":"9aa1af1760c677a2cb81a92384441238f1b3ec61","sha256":"103353ff138b3df27b2dbb80c215ce66da6ba569938408bd9556ef7801fb0c86","sha512":"89c2d5ced9c43bb93155ddf6f8eac732b0c70466f66434274eb219d18a57f2bf53d42031965eada09c49328d9bd169078f4a870636f86f18ba8401cf81531a98","ssdeep":"","tlshash":"5a11fc5b081b4c1a542140f418da7b87beb85c9f81d9801eed8d9797207ace87447620","size":1067,"data":"","first_seen":"2026-01-13T13:58:34.390631Z","last_seen":"2026-03-15T20:04:55.021028Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/5c2dfa3698d55f88.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c312afd971809bc3db9e5eaf65868390","sha1":"cdd82208f11ed1d19aaa2bf28cc1e4d0a8c1f34a","sha256":"66f9a1dd8a15357102bd6b4f4a566df16ab15216f7b3c35bc7c9078a59ed512b","sha512":"4e803ee0523cbd43eaf547b43af59622b2b328be96152cc63e968812ad2f9307840e856048a5f5080594c2b3ba39c31b3b842480a2b1c0e5be81744bf6afebed","ssdeep":"384:bbga4IZDHYamPknd8llyLzJFtQUVA/z8oWDmuRHlZ:j4IZDHzO0LzZtAwXZlZ","tlshash":"11c2b6b27395fdb212db81d9c03a1005f2650c3521ae24b0b395ccef769dcd992b6fa9","size":27948,"data":"","first_seen":"2026-01-13T13:58:34.388892Z","last_seen":"2026-05-28T13:56:00.738588Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/e871c8e1d1ee20fd.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae328aaf608791b08fba9022defdfcf2","sha1":"28dc42c57ea6f46c954ef6a27e0b196aa2a9f35b","sha256":"e3ab286ff5dea56a59eb0f4eb0bfaaaf1c104dd5422059717b7be7f1f3e7d172","sha512":"fa35022ebf0bbcaed9d57b922249923690abda22e0ee1a933e93fb6d90c5f26f990bbfd93eba04951691f974117479361a73b247457c222111f52c649a6b6022","ssdeep":"","tlshash":"9211658925e5b0b8965159c8a03ec64570022c3d540ee4b6eba6ec23113fe4cd13b2b9","size":1000,"data":"","first_seen":"2026-01-30T09:40:15.337806Z","last_seen":"2026-02-23T15:31:45.987543Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/37bcdd8cbb92bee1.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bc8257e12e6efd6f13bd4306f0e6641","sha1":"6c686776674307b242c7fd89da354c2686a33b6f","sha256":"9dc7ea545eb3b017d9f4a753779b3ed63895b76c29d643a23c10703e525fdd64","sha512":"4782d1f38fbba246b6f5856abc42b5958727a20f707bb256e008581a9564bd60ef5542d0cc9518922f5202615333d080f5a429e5ec8dceba074ca3c68bc23fa9","ssdeep":"","tlshash":"624154566318316c47b7050862a667dbb73c5124a314c678ce9d852cb3e6ab8c2fe5d2","size":1932,"data":"","first_seen":"2026-01-13T13:58:34.46114Z","last_seen":"2026-04-09T01:34:11.92593Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/aa40970f24e4498b.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad701b551106c508d69103e4aa658040","sha1":"8609892225e5269a122aa36fac5454616200aa74","sha256":"bed556e04b1b76fb383cf0c5d5a347813603b9f189367ac18bfad9dadb0a650c","sha512":"2f055e8e240c3654edc880050c81126a1ca3706c3b8884b58796e4aae0b2a0a042d7be913e9a620772fab1fbe74bc1ee7cfd4b393445adb0aa30956647650265","ssdeep":"","tlshash":"4b4197ada6193bbc19374317d74962d1f12a4d38e27b840095cf87783101a39876e7cd","size":2420,"data":"","first_seen":"2026-01-13T13:58:34.391511Z","last_seen":"2026-05-28T13:56:00.709489Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b7110877769f0f22.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23bb12ea805c4ff15041d5d47dcbac5a","sha1":"8ac9555e1d7cc34bc18b0044cfd973dae71a9d35","sha256":"8284d018dbe1da8020e3a56c8d8d2eab346e3f095f15dab9ac816e6abd37eb40","sha512":"1dbd31e77b234c873adee13f73dca5007341e64c62743dc1f7dee735da4a035b37aa1e6fbaf065d612d453e7943177b276631b1cdbac3cd9ac9f68d3a08ec994","ssdeep":"48:uD9ee91MYEHcLzmvTS7BCFAUA8BTOQaKz+B0hpANEXa5dEXvUq3zqNUq+oONUqhB:RyvYeBrwNIRNFsUq3z2UqmUqJ0YAqY+","tlshash":"6281710fdd060378074681a434ff1b9ee53ca54af1f685979d1d863c22b2bb2827e399","size":4123,"data":"","first_seen":"2026-02-01T14:00:57.510483Z","last_seen":"2026-05-28T13:56:00.749727Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/accf940692610c13.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f54304db04496433b07beb8a07dedc37","sha1":"cae2db299cf5a780628c4ad2e2ae7b42ea572b14","sha256":"326afce1783fe02a70e68e44b20ab8c17d0bf08bc418d4dfea8b5eadb2198107","sha512":"3de05ed81a6cf07b61208850d7b3d6b9aa68fc506bafccd75144cbc18ee480f7014b35d2a7ae9f299490e501315b31a2a4c3a868ee6ae03dc03ffa03510b8878","ssdeep":"768:cdZfa4VxZhTD84cS6a9UkVBEydFszwiKrZRpTy8Y3GJnwxGis/0K5FaNDMQoawx:caQ7h36nlKZRRyh+wxRcLWBNwx","tlshash":"194319c577a1b02243a751e9445f140bf27dea39984c0868f251e8f728b5a8d86fff78","size":57812,"data":"","first_seen":"2026-02-12T20:36:03.631901Z","last_seen":"2026-05-09T07:37:36.90707Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/44a49465387680bf.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b31a3c83f986a04ad80c7618ed0f42d","sha1":"cb43d9dd4b664637f8e7d34f8db097765fe2fe25","sha256":"c0aaea4c727db1b4550ab636e2b695863eabb46f341593d3bda8fa723dc2902b","sha512":"999432ead19eb74fbc858cb8cb94498335e2f8c63051182d005c501242c92b174adc660e07c6ceb9f8680781d82ebd9d8424802504e087d4aa30b39e0727ccc1","ssdeep":"192:zvnaPno9CUmhVMgDYKWyqrmAs5ZvZjkVDaXgm0WBFpoNv:zPACCUAMfrmAGj5NBFU","tlshash":"5412a50b471932790ac602857e9723f2773d684d72f5d1a09c8e461c23da67aa93ffd4","size":9785,"data":"","first_seen":"2026-02-01T14:00:57.558496Z","last_seen":"2026-04-09T01:34:11.861683Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/4694ccbf99661862.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ec2b2d9a695fb9ba9373c1282b593b","sha1":"7cca762ca195d4c173c33ce95e9ff64237ebe964","sha256":"ef81277a962f81ed20594a1778caa84d15449f34a395f4fd9cf39c48dd7c535f","sha512":"fe1df58d8ba5e748b6f61f4d2e831e01cbce5755981f18bb2d383dd74381bc5e84977266f78faeed46fe599cc9e8714ba8572d61ca3620e113a5cd9fb5048f9f","ssdeep":"","tlshash":"d9317316e5000bec031141a2a07a2af8b06d1118f3bb4d96994ec56a62bcf79f13f3b8","size":1610,"data":"","first_seen":"2026-01-13T13:58:34.496506Z","last_seen":"2026-05-28T13:56:00.644714Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/97a6f3ed35a1c469.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7efcce7ffefb3b55e70c5de14600b04","sha1":"b056f927afc51decab632ca5d3f99f109e7b7031","sha256":"0e1e093766cb3bdb8388d65d9ca904ab9df9157691a3f647ffc8f29633968273","sha512":"094c76eb01962990a5ccf554e1ee38f0ef2925f93777f6e7ff2c4adb73f5dc38fbe6215ca587d406daed1885fe2cb1af099b6f8cfb9df703a7c6c939bf0644e8","ssdeep":"","tlshash":"9e41315a8a44f6a8038f1009fb77d61079b8030cd1e5e05d6dde0790a2fe3ba943e7a9","size":2035,"data":"","first_seen":"2026-02-01T14:00:57.577467Z","last_seen":"2026-05-28T13:56:00.718218Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/596affe72e2d3582.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16705af47120164cc3ff54d388c4cc71","sha1":"e11c36551847f1b78eddb42f5cdbf8b31fb02da3","sha256":"c911f1629ce8d1144c1fe5f176a76edaf5e01a0060ca03e1a0a94bd3531a6034","sha512":"d99fba187ce466582f440a090346354d98ef84e2b9771c361628ad1d318e4b73bb84a258f93d10bf7b5df6a6acc460ec3c20ef109fd9ae599429c194f51ae1c5","ssdeep":"192:yGZic0tjr2xOKiyxZuW715N+vtg07XU+filJbSbZpddtCOtHksW67XMUQL+VP2FH:hZifuOKlZuSEvt9/SM3tdtzW673mR","tlshash":"3042b50bc61416f127af0172364f7aa2bb3254296ff4f087c869c16c23eba5e51375a9","size":13092,"data":"","first_seen":"2026-01-13T13:58:34.525662Z","last_seen":"2026-02-27T13:26:05.364773Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/4542b55ff482d5ab.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"279532cfbd7810bb6138fb2eaf4e369e","sha1":"6cc9d9affca5e9cf4677154927fef8c86e575968","sha256":"a789cacd4f859dd5a8dacaca7c22df87206b09af2821359a5c74d66474214653","sha512":"51681adb81e93f4e4e12491b18cabad8239187591ffe053637e277897585ac0f07703f59d261d59c6fd5a79e4a367f8677a8e2cd27d55c66d6dd976714d2ee0f","ssdeep":"","tlshash":"43f08badd210aa2d6a47d1acb2bf9765a6b411a3504d1c03ad8fcda443307dea9340cc","size":593,"data":"","first_seen":"2026-01-13T13:58:34.423074Z","last_seen":"2026-04-09T01:34:11.917205Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/d2a1bd5caef79182.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12aea6dd2db40075d0537086461e9e8","sha1":"a768f5451909d169607fb11564172a17c1f20772","sha256":"02d449ac0eaedc4335a5416bac75ab54ef34dd5d2a82e6ff6b1e14902907c332","sha512":"db375e4d741e3b8bf84af2509d26a773851e617834e4027260280043e97ec58e3d9255fba49668e7357f3ed8dec972a035cca29bafeb598b2af107d24073620d","ssdeep":"1536:8boZyx9ybUzDtHa1oRMLQY3yhbEWHmsrejXdyrNulW60mX+JAq8dlL35ZT:8boy9Rd6KaLd3jtsijXttOeq8PT","tlshash":"96a3d546ce2e8f173985f7b448d7b38a588886c7ce348a8657f5de9e31498cd608c763","size":106079,"data":"","first_seen":"2026-01-13T13:58:34.507356Z","last_seen":"2026-05-09T07:37:36.942263Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0e93f2801bad829e.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c54dabff4678ef2fde36fd9eddecad41","sha1":"5a7fd5e8ea6d02cca31640dd80b564c17e756206","sha256":"a182da4b9510af9003627008019e781caf0dd55e01e11eaff95444dd7cb30ae4","sha512":"22cb020467cfd91a0c30576d6dbd35e4dd02898093d71e54ab7f7066465909d8511f30d4d3a8108e3d2a14c7fc6c64c406386ae34e8d28a2b3e6fa8f676845e4","ssdeep":"1536:4Qe9fxkVtS4sMFKudBi6WjvnvlaqZfgVO9nDfXv:Q2BiVrnvl3DH","tlshash":"36731b7461646ef4b61f41b8f06ec54c341e7eacde6a9a54f3b87c265a048c03e96f83","size":74625,"data":"","first_seen":"2026-02-12T20:36:03.64216Z","last_seen":"2026-02-23T15:31:45.774837Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8ae6f7be38dee493.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1d7ce5a2f251f131abbe8bfa423023b","sha1":"b36f7df6b59b4eaeff16a5bb737f48401140d7a5","sha256":"f0b7d7d15e76e1fd0f71420c765220985d0097295c17d882aba1c30a31f54c96","sha512":"fc8376588419d7f170a556cacd68eea37cf93d1922bba16696a0ee78abfa7c2ad85da13c8bb19e6c9520e8c04304ee37eae02495ad28f8119345673f7e477e76","ssdeep":"","tlshash":"8f112588d70d09a80997b33275c5b49175a019d8d0d6401be9df8d3882b5f2e96db56c","size":1008,"data":"","first_seen":"2026-01-13T13:58:34.513369Z","last_seen":"2026-04-09T01:34:11.906493Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/87b4b4c9015d7cf5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"852c271525fc7bd3eb088f93cfb52145","sha1":"f76a6d150003391a497589a6ff07ca2123892ba2","sha256":"33a95cb3197e7391100464a2f83532693f0b82604e47f34f4c0d609da1aecfd5","sha512":"3eba5e47c8000576e4a5c15aaafc91dfcc005fdb3b0eb328b9d2c291edc85d6445c7a634cb5502b1e1465783402c09cdba1e6a2bb1d22823986bae5ecc0a2d15","ssdeep":"384:FdaQRnz4fn/vxpVSHvHXJXPfPFOCA/MRljvhk2vQvmhEuXqHXKvhy4yNm13QNt:+QRz4Pro/JXP3FOCwejZTIyXqhHNmqH","tlshash":"e8a208923285f1762b970091d43e4008f23a1d39644a602cb6b8adf7b553ccab5faf79","size":23090,"data":"","first_seen":"2026-02-12T20:36:03.466951Z","last_seen":"2026-02-27T13:26:05.350491Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/12c3b6af87c4986b.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73f03878e7883867660ac79c6af9cc12","sha1":"8389ba49cda8e3479e0d717d0c797ab925c030ce","sha256":"d9127e6f0e3863b627df583f5517b741792ff9310ac7a822c21f52d7316e8066","sha512":"40a16fddf2613b16a968fbd58abc26a64b77b989ccfa4397f4a0067f6e0119f851193810e76e699c911bb1a5a8b2057375ee1baee51a934b1910f96e7d4d6ffd","ssdeep":"768:Of46MYFqEtvacwJaBQyzC+RsC68uxZheRoZBLUbBDppNYY:J7YoEliyeHC684wgL2DP","tlshash":"4d3339a73246f96957538590e43f830ee22cac38581a8124f36d3db95b95cc0d6e2f7b","size":54142,"data":"","first_seen":"2026-02-13T20:54:22.049534Z","last_seen":"2026-02-27T13:26:05.394242Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8b183fe50f6749d0.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f5431f5839f9bedaa24365dc37eb03","sha1":"05c99acb68079fde5518ad436d27bbd377a164f6","sha256":"86b95a85e7f847a3f74cc10dea39c0d71b7310279794444b2bf95d322c1dc0fd","sha512":"1db01b787f1c5c095c3dc8c211ff635f4dd70aeb4e6f4105541868734f4264a7ed772e21b0607b3a305c2fdd378f997639a52feb2f0715cf9e174c25802c8bb6","ssdeep":"1536:DQm8KN44hUdGv/I7w2dXeaYYnPIL+up6sN:UENOuA75uzc4","tlshash":"e76319d97282f060639350ad803f8507b1366c29140dbd55f2aed8e46e75d9ab07bf3b","size":69227,"data":"","first_seen":"2026-01-24T14:43:36.95323Z","last_seen":"2026-02-27T13:26:05.35299Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/089a35f5b2da00fa.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d978075109e93698c876cf7815da41d","sha1":"d6e1cb586162dad8d4f50e8c31f20b26cda650e3","sha256":"f8c791cb559e3b1002eae650ad1185a065fff31feb4cc9424e5eb24c6d7c833a","sha512":"46c0122ebf82f4730618a0ea7796f6715ba7ea716d0942cff13a63d1d06c080162e16a52cfc22d2305295fc179f07495a2baa75f41316104ea8392d511a780e9","ssdeep":"384:FyeNIscbzoieVdDEAjyqGzXkN9IsjbOzx4BWJUx:FyIdwDk3pbax5a","tlshash":"d6c2e8a5b582f4a0abc340ed407f4509b1366d1800adf470f2e5d4e672fe989a1b7bb7","size":27184,"data":"","first_seen":"2026-02-01T14:00:57.576054Z","last_seen":"2026-02-27T13:26:05.384339Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/5444bdd1078b01a3.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0844f516c91b9e393dd432fd46204f8b","sha1":"3fd137ee747eb68c9ac6df02c7230df97293d55b","sha256":"08dfad27c27f5736af4cec1f4401e67cc57b8cbf377b982474dc2983659d6234","sha512":"57ad1e68bd3cd1c0afb76756be16fa0cc72f1f7e741a1be903fe3eb0cba6b62a500b6c88c24e82096a0fc02b18540bb958e69076b0173a5032b36a0b01ef3b6a","ssdeep":"1536:EU86G0tBW2/YezpEQ54l4jnYPfRy9rgd+:E0G07WUXLVjz","tlshash":"cf433af533657034875781d6903b420ab33a2565a40a482cf7789cfe39b4a8672b7fb7","size":55862,"data":"","first_seen":"2026-02-13T13:23:25.227831Z","last_seen":"2026-02-27T13:26:05.354115Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/d9e6e3ebb90c165a.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d54e3d679627817f137bb46cc910456","sha1":"813eebe75fbb4ba1a51e02d1bc841ea389750020","sha256":"180d95eaf15582acb3975951ade6b15df0b1b710e537e61b02866b0a9ed5eb4f","sha512":"d546d0400933ce1b79826156420e6476d6e112346a8d9942ffe4557fb06fad7ac9b1a5f208b5bb3f87de0f77f90b332f5e4b925fe3a8a92e1a027992ab214507","ssdeep":"","tlshash":"a131a70e5318572d45a2e19a3fb7298fa3391122138ac054f998467d32667ecc2326fc","size":1801,"data":"","first_seen":"2026-01-13T13:58:34.47663Z","last_seen":"2026-04-27T08:35:58.66008Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3af414076e40d6d2.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f552d8fad4c6e35e87fd003150efd19f","sha1":"277e39792dae7041e8d5e200f27cf10bdf0a9cb3","sha256":"1a04a86e0680d042931561c4a1d5007b0f57c8d52d4315e92e67afa0da7f2853","sha512":"00f73cccc0daa26b38a20dfaa1d2fb84eb26590254bef9fb7eabcb20a7eba519b5bdfa0882d0153b7257015a81626092efc58270b4f373f2ceb8a737a0e2c1da","ssdeep":"384:OBZVn7f9RurWFNhNS0bHygpWqP4VA8/cmmoBPjUHa/Uk7u8fnxDOnRXcPVnX:OTVn7VvFNhNXCA8/cmzBrUHackq8fnxV","tlshash":"48528403ba5c373e4a571363b9ef299537bcd12000b4e04555ba85288bbaea6c1f71ed","size":14101,"data":"","first_seen":"2026-02-12T20:36:03.490194Z","last_seen":"2026-05-28T13:56:00.825517Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/80b5b3a83e5835e5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a6332fd46de048523a45e2e63e85044","sha1":"ddafe71e7f76a02674a9a17287b68cd3d3a5f820","sha256":"71691e84d74b6c6ab66b2d6091bcea6aecba5f7d38d46c9d4385299f81b83d71","sha512":"002f7188f6b9b2d7eb2d8994c84c81f835de272fe012c59c2319aa30821a5693295159d1ce722cea98d17d19e538eca4dea76d3dde40165fcf16bbff41999956","ssdeep":"","tlshash":"90f0dca7f50d88e408c472197821633f3ad01af155ab9673c2ae4abc4bb7f5478c6455","size":498,"data":"","first_seen":"2026-02-12T20:36:03.611852Z","last_seen":"2026-04-09T01:34:11.895562Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/943a283ebf65b52a.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"461d1ce102877eef0868117bd9268262","sha1":"824a289131cdba8a37f93513720cc037b753e6bf","sha256":"e82235c49191583898d3a6171e1f4f58740785bdde62b19b2e574da57ef3af2d","sha512":"20efb0c62beba2376d261cca1aa63e012387c4709d4456ac5f3c59256c996fa2bf8e3eccb7e0a2b5a958b97da579671c5f4b04d4578a73151e8955b166b21729","ssdeep":"","tlshash":"821125d38f298c0c1545d33af089f055ba7ae80a98fa04089be94335317bd79f36ea42","size":1014,"data":"","first_seen":"2026-01-13T13:58:34.457884Z","last_seen":"2026-04-09T01:34:11.904265Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/a5c8eb01cea61f04.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a64f5067ef23710cf8d8c0fe7dc09113","sha1":"afe5d6449cdca321dcf6e55b0fd87ba4d2682892","sha256":"1160ecd14d758e215e24bbd0c709a76c9b0746373ba1ad2f67dc4446b2b5e8f8","sha512":"bf71635b188358a5e79fc93768a06055ab0accd93118db027180acc841d3cba3db51995ad64fca99bc118ace2d290d87ed6b5ef8bb0f3fee6cf5af489957bbde","ssdeep":"","tlshash":"e0119bbc0113e84ca3a410ddc17e8d87f22a78b51689d021b9bed89f15b5dde807b69f","size":1000,"data":"","first_seen":"2026-01-30T09:40:15.334097Z","last_seen":"2026-02-23T15:31:45.991401Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8ae6f7be38dee493.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/8ae6f7be38dee493.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"3f0-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVT8orl9lHK4SD6a7fBZyc2nuTO4P4nCgfFegt3CgNcBoSCaJPejCquUTZxaGfb1PSoBuFp1UcMIedWjANYhHeGDUY69CJM%3D\"}]}\r\ncf-ray: 9cd73779bac709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1008), with no line terminators","md5":"f1d7ce5a2f251f131abbe8bfa423023b","sha1":"b36f7df6b59b4eaeff16a5bb737f48401140d7a5","sha256":"f0b7d7d15e76e1fd0f71420c765220985d0097295c17d882aba1c30a31f54c96","sha512":"fc8376588419d7f170a556cacd68eea37cf93d1922bba16696a0ee78abfa7c2ad85da13c8bb19e6c9520e8c04304ee37eae02495ad28f8119345673f7e477e76","ssdeep":"","tlshash":"8f112588d70d09a80997b33275c5b49175a019d8d0d6401be9df8d3882b5f2e96db56c","first_seen":"2026-01-13T13:58:34.513369Z","last_seen":"2026-04-09T01:34:11.906493Z","times_seen":212,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/domain/settings","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbvJMMPgEzXrGkzmRPqr9U2tcOez9MG%2FdtKor0%2FUSpuCG2YA8%2F%2F5K4AxIo24MzZo%2F%2BzTiknrQaRRgWip0EwJPpVs0GynDjg%3D\"}]}\r\ncf-ray: 9cd7377dfb2a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2f4c8d1ce45828ffe0f6991222870e3","sha1":"f174811990dd662ae70f9e3ba4272f93c5d6910d","sha256":"41c643e6582c7427f070c096e165928c3522e07fbfbd96bdab061a3fed93e17e","sha512":"e3570a5b6d1151540bfc4650f16097d32f293641fbd78b4787111e1ba68101e0244eb3b57bb054d300058d5ef5bc5327b599be3ca3973e9f5096e7a042aae798","ssdeep":"","tlshash":"2211292e441439bd85d9d52acb1d3c07477ed67772321d28a79cce3416e70b11628527","first_seen":"2026-02-13T20:54:22.037598Z","last_seen":"2026-02-13T20:54:22.037598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/4c256775dea270da.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/4c256775dea270da.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"154-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ac2Ky6mYH8mhRs%2BT9iBfjgSKKHMDp8fmmjfn1kk76XGBlYqWCOZBufY5OHbOk4Uw1UJCpHvlFnJRmsBw9FdRcKEW3%2FRxKOM%3D\"}]}\r\ncf-ray: 9cd737744a9109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"2ee70ea383424bd00eb0b2c1d6d17232","sha1":"244cbc3e2f69ae1446d4520081b68339937cc883","sha256":"b8646432b01557bb5af3c7a28b37ff02c2bc5750b9592b637a8d93609e9f613b","sha512":"1d0f4408c726bb456c7f5f4b721f7aaf42eb41e2ad989cb6691d8c8f41c88f686bccf1e964598a325cd7f5dc1a3dfdb2a4be4726582379f4265ccc4205fd1bdd","ssdeep":"","tlshash":"ece026134107e5dd0067534ce13633bb20382bb69b4e342b914d1594d17865464cbd7c","first_seen":"2026-01-13T13:58:34.468178Z","last_seen":"2026-05-28T13:56:00.762912Z","times_seen":226,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0ae4c2ebbf3c8f80.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/0ae4c2ebbf3c8f80.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"8dd8-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bz7q9RiAcobeoTrixRt%2Fg7OVxEpaJa1urHOq95iMkN2ID9yfb%2BsA0hBPDXz%2BPl5IN0oSPCuiZPWa1B0cNjBZBzABkVaA7lI%3D\"}]}\r\ncf-ray: 9cd73774ea9c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36312,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36305), with no line terminators","md5":"f786781fa0139399c4b07c3def81cb2c","sha1":"f12b9cf0bd3b8d42aa3dc179629d4e8fc203b199","sha256":"95b2e8a5d1a8e35d518f660e97770d8ff83f17b62bc103c9b19959ea924db102","sha512":"e59b1cac732294942803051c56bda51d0d360e90f1320cd3e6f7722978b53d31d2092aab9ebe57e0e1750da96aaad3cbc3c9843fe88c8518eeedc37cb983bcb4","ssdeep":"384:GdEvy3EVWntvPSBAXKfoPnXBdY8+RO5yKNFaiEMEEgYAvJ9JU+k76DWAC/+kp+Vx:rkWE+k9NQFJg76rgp+Kbe4F32","tlshash":"cef218d8b2c3b028123364a9007f7117713ebd25641d8943e52bd8d57cb6e9a923bfb9","first_seen":"2026-02-12T20:36:03.574035Z","last_seen":"2026-05-28T13:56:00.663868Z","times_seen":55,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/d2a1bd5caef79182.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/d2a1bd5caef79182.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"19e5f-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMOGwk7CH%2BRyE4l5rpsesXy%2Fy9J%2BZC%2B0b7q4fKwLcpGkgKN9Mv1E1zXpsjntVlURVmlg5RgoA9rRPgM%2BRd4%2FCv7vjPERGsc%3D\"}]}\r\ncf-ray: 9cd7376a6a3009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106079,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144), with no line terminators","md5":"b12aea6dd2db40075d0537086461e9e8","sha1":"a768f5451909d169607fb11564172a17c1f20772","sha256":"02d449ac0eaedc4335a5416bac75ab54ef34dd5d2a82e6ff6b1e14902907c332","sha512":"db375e4d741e3b8bf84af2509d26a773851e617834e4027260280043e97ec58e3d9255fba49668e7357f3ed8dec972a035cca29bafeb598b2af107d24073620d","ssdeep":"1536:8boZyx9ybUzDtHa1oRMLQY3yhbEWHmsrejXdyrNulW60mX+JAq8dlL35ZT:8boy9Rd6KaLd3jtsijXttOeq8PT","tlshash":"96a3d546ce2e8f173985f7b448d7b38a588886c7ce348a8657f5de9e31498cd608c763","first_seen":"2026-01-13T13:58:34.507356Z","last_seen":"2026-05-09T07:37:36.942263Z","times_seen":222,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/fonts/LemonMilkMedium-mLZYV.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /fonts/LemonMilkMedium-mLZYV.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15664\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"3d30-19b2715ae78\"\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucxF08FgahCcDwO4OooQd8q9L6jLfFBB9BEuMMGyz%2FoBwtEODf2L31JxQO%2FlCIZzXYfYUNwyN43aLIhxqEAAo7vW26beH0c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a1a0009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15664, version 1.0","md5":"29e8a37a85b730f1486a2f1006da40ab","sha1":"9a2398188c9d837067342a92507ebacc38cd74ac","sha256":"6eaff8f74e006352147a30270c11333cde5ae944af8df06fc0e0e6d6a024b579","sha512":"d5c2004b7caa55c6a8a8c816f0edda33ae15b104907397fdbbe5a78c07866738db6a916002572362c584f81f562fd38b1d398ad28a5fd05b8b4d8357a33be1a1","ssdeep":"384:4wcK/SVdYbLKTpMr80tNq78vOqEhLL98SR6OGk+l27k7:4wcK6VSbLB8kq762x7Rpb+l6k7","tlshash":"f462c089e9f99558e2b17a2520f187e7a508c332cb26b5f8f209388455edd1f1c20776","first_seen":"2025-06-23T17:45:24.278891Z","last_seen":"2026-05-28T13:56:00.698411Z","times_seen":230,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/cryptoDesc2x.9fd42ead.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/cryptoDesc2x.9fd42ead.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 571535\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"8b88f-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzHnFiqrSq083mJiF6e2l9ps4Fyw%2FtwDA5D3rU3d0qIIrYNUba5k%2B83ScFbmlxIBr9UdgHlrPvvtJ1W4B%2FyPcCcu5Gsr0oQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a0f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":571535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1268 x 500, 8-bit/color RGBA, non-interlaced","md5":"03ba470385ec2fe564674f7b78b80977","sha1":"85179d21d6551adef98414f92d49e2caf4882968","sha256":"a9e0544fc2fba49c07aedc6de93808bd969f4bae95955ede6e5d1caaebd3237e","sha512":"780c4bb10f909a599343dbd3219d5d988beff464a8472d025436ed0610d75ff69a041e151e0835f8d9fb17074303213df0a84d35b572012c9f2b901de5fca93a","ssdeep":"12288:braAmwcs3kOwZSBv0KY620+LEF6/6uHEDfFNI7B/ESzr8sh6H+jTOCWCs1:bW21DISyioYVuH4w7BMSvtsH+nOCWCQ","tlshash":"b2c423e65c64ea1fe6fa257f7ff0478807d5ebc4251841e039aa2d02afb2e301315768","first_seen":"2026-01-13T13:58:34.450886Z","last_seen":"2026-03-05T13:40:52.752181Z","times_seen":196,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":422,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/10a6f40673bc6d45.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/10a6f40673bc6d45.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"14e71-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeK%2F1%2Fxg%2BvS1cSc0xTWICAd4fpqTgncZoGyX0q8fPmGWTYPmiEmdIPBui2asSgIZu79y0aIAyg3AUzL4GT3xgRdq1T7Acu0%3D\"}]}\r\ncf-ray: 9cd7376a5a1f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85617,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b55536f33f6535c10478ef81aed3c13a","sha1":"b004d2c8050b6ddf653bf1c2ab5bf4b85f01c5db","sha256":"c64703d1e73a9e608c727aaf43c5e8531d2938908641b4b55f8a42407d81b1e1","sha512":"e63ef5680b5832c467ae7ebb1facc410edd29bc9d25161241bb17c3fbec2ee95701400800fe4d9d69d65948e56d79afcdccd47552092c0a1c4329d4d5317895e","ssdeep":"768:hVWDmHlOs82KywJr8EU6KtsdDvdw4puQ1BCbeAvrtmaP8apfG47q6FyX4tN5ualO:Wap54FEK+Dr0fgTua/PCo3lTfqR","tlshash":"d683d6f936d0f8920bab45a6c47f0005f32c4d37245e78a4a3e5ddda316455ee0e2faa","first_seen":"2026-01-13T13:58:34.459189Z","last_seen":"2026-05-28T13:56:00.702236Z","times_seen":226,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/turbopack-67b6a3e8a95fdcb2.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-67b6a3e8a95fdcb2.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"26da-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EoyEhmQJOIZUoWOiaVmQny9cXvnzyMRfn1wfo%2BwsJNPo27Hft8qfWBzlU6wJLvbHzww5hB70wL85AZ0dnlnEpqYR8SM3yyQ%3D\"}]}\r\ncf-ray: 9cd7376a5a2009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6159)","md5":"432a4b6b685da118c4f96b9b4a38cdc0","sha1":"e03481bed34a618b1c798b18980de607e36720c3","sha256":"3779233948512f2041b7ecc1cdebe3446d4f4f9cad0ea22e20a8cd16ba277d53","sha512":"f12e0be1ffd130a534b7b2a4e0d3ac2ce342a1964dc9dcbc2f97fb70f0a8f97ea07b3e7cbe05165970ed7cb34b29b7fc638e2b077cff30552745db9e0cbc2ef2","ssdeep":"192:2X/IwHG+J8iEsuRn6EY8iaWkUmlGVhFd2mcKW9PZPKFXVqXmZ:2X/IwHhyXWkUmlQ8mcDZZyd","tlshash":"8622c7da37a6f07343afa1e7803f4144f1798869146d581c939ca8fa28784ae45e3f37","first_seen":"2026-01-24T14:43:36.897452Z","last_seen":"2026-04-09T01:34:11.85938Z","times_seen":210,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/12c3b6af87c4986b.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/12c3b6af87c4986b.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"d37e-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DxOZ6%2FIiM9o%2FpWwbdK7UXPpPjQ2ArMs0aay06Gh5s0w%2BWPkIaMiZPQ0ZHkI4Nkk3I5X%2Bi8DkQd28nkTUOR2A%2BDMVwXMz6s%3D\"}]}\r\ncf-ray: 9cd7376a5a2509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54142,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15321)","md5":"73f03878e7883867660ac79c6af9cc12","sha1":"8389ba49cda8e3479e0d717d0c797ab925c030ce","sha256":"d9127e6f0e3863b627df583f5517b741792ff9310ac7a822c21f52d7316e8066","sha512":"40a16fddf2613b16a968fbd58abc26a64b77b989ccfa4397f4a0067f6e0119f851193810e76e699c911bb1a5a8b2057375ee1baee51a934b1910f96e7d4d6ffd","ssdeep":"768:Of46MYFqEtvacwJaBQyzC+RsC68uxZheRoZBLUbBDppNYY:J7YoEliyeHC684wgL2DP","tlshash":"4d3339a73246f96957538590e43f830ee22cac38581a8124f36d3db95b95cc0d6e2f7b","first_seen":"2026-02-13T20:54:22.049534Z","last_seen":"2026-02-27T13:26:05.394242Z","times_seen":18,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/new_char.b7836446.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/new_char.b7836446.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 1491820\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"16c36c-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcZbm3VjNdaEGLZDXz%2BFjh%2FdQC41eB%2FWYtJ264s%2FKkWweMHfJUy05raWiLsBmzOHrvQEo3NdXWJ9hqJtoa7Ul7%2Bh%2Bjz42VU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376fca5e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2004 x 900, 8-bit/color RGBA, non-interlaced","md5":"8e4ecdafecc29f69885cbbb5065524a7","sha1":"2305183e342cc132256fc1aadeb2792d938475df","sha256":"c4b30300c47d254d04770565c0fceecd22b7469320cffa70692ce8a4156a757e","sha512":"e8c911da3ba9de2686eb94b0911b0e4379227f0a10adb2ef45f496080b5bd03a30899364b62feb1172ef17ee6ef5f1d171fd7cbe99d33e998f9bf3f9eb797916","ssdeep":"24576:0Ie+O0724meno0fq1r0low7verf/dJvU1PvJkamanB9I:0IeWH1q1rcBKlJvUeafI","tlshash":"ef2533c6438afbe9edab6cb1d5305e7930772851ac92cfd9e7d8006e14dec81760a42d","first_seen":"2026-02-01T14:00:57.514191Z","last_seen":"2026-03-05T13:40:52.667716Z","times_seen":82,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fbasketball.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fbasketball.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11120\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: TvlVBQ-KWF51odo1wCKfXrD1SAa37tCx7DvoS4zCpR0\r\ncontent-disposition: attachment; filename=\"basketball.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKmQwjVRt3ybmodq2U8f5YK0yK5MrpMpqdyjNzAkGcz755iyqVsNLr7YnsvGYOK28bS5okMoe%2FSQWMIgfBB6XcUcoG8h44s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737711a6a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11120,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b6a293c5ddff971440197e9727c2ef7a","sha1":"5ddad43153e986270b5f696926327d98ff8c1058","sha256":"4ef955050f8a585e75a1da35c0229f5eb0f54806b7eed0b1ec3be84b8cc2a51d","sha512":"a93bd4edcf92d48faea42ae565d803a4e1903677f4e4303989ac1e2cd8a92815b2ed903670fad66fcda92faba64c9a05666285e5daac05ac8083cd90f44217c4","ssdeep":"192:rG7ewrDQULm8amyjB5VHQP0CmOoAuJznItmOxel0o:ru/cB5VHQMC0AuxGxez","tlshash":"d832c01957dc8523c2d00774e79c048136041b3b637e97d92e9c793aeb2493ad0669bf","first_seen":"2026-01-13T13:58:34.421475Z","last_seen":"2026-05-28T13:56:00.601952Z","times_seen":209,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Ftennis.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Ftennis.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 6969\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: Unc9D381pggOR8l5o84t2WdcUCW1E9V6rAizxYJcI14\r\ncontent-disposition: attachment; filename=\"tennis.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0i63o70w15Lez%2FMyshek9KeA0i5kRqV2J5D08PCnXujo0qXYSj0p20pvnKCWnVtRLar0EY2aLCGmivyUN3%2FNhfAgAfCTib0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737711a6b09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6969,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3560d7f273cf3a6d44b9b346750d4d11","sha1":"8904efbe9e5f20f3bba06fa4fd05e5fd5e61c93a","sha256":"52773d0f7f35a6080e47c979a3ce2dd9675c5025b513d57aac08b3c5825c235e","sha512":"2fd58555d50cf80646231ef38e579f066a2e20606b3252ca7e7a3cbc0e47dc49ecef68373b0328ad75c78776c45cd6771b714e06bebd8fd20a87d2b8f7cc3b06","ssdeep":"192:rGXtsprlISr5a5H2wARiW++9AS1k/mOs0o:r6sbVr5aR2xghrx6","tlshash":"24e19f718321c8a3c80a11f149d922fb1669e98153b5dfafe525b753c93d2e30933a0b","first_seen":"2026-01-13T13:58:34.502859Z","last_seen":"2026-05-28T13:56:00.830515Z","times_seen":209,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/bd8134abc73ad514.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/bd8134abc73ad514.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"17b-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VagxTsF3rDzq790EaD8tlIxMbPdpQzkYFe6rA9NCXe4WNqRIJxndPnjx4hH5QxL8FrBSgYO13yx52t3Px9E6XoNaT273ojw%3D\"}]}\r\ncf-ray: 9cd7377b2ae609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (379), with no line terminators","md5":"165fd581909f5aa34a58fd0f0e2227ba","sha1":"47c3422224dc5d6e6a4c0ca212371377b5906bc1","sha256":"081a4e70046edc5780986ed69069643bef45245d59715cfea62414327886561e","sha512":"d8ca8ad25cc830ba7d27f152846910b66934cf86735f6e0dc9542310a63b4fe3707767921c9600071a75f576e427cdb839ae2be85d22766e221c652984ad970d","ssdeep":"","tlshash":"00e0686d0a456ca82a01e69cb52f57a471b7209e40ee6800da8d8efc6532f3e0b46016","first_seen":"2026-01-13T13:58:34.516843Z","last_seen":"2026-04-09T01:34:11.881115Z","times_seen":212,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0aaf085a7f1a0239.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/0aaf085a7f1a0239.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"37a-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9UKGj8y9l06loj%2BxyerdZq1h%2BqWDbxMe%2FsooG5SnndO9pqMblmpCVLsftypVGNlRJJblIIlmiyILOhqaj2ZJJZlo0IqSC0%3D\"}]}\r\ncf-ray: 9cd7377b9b0209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (890), with no line terminators","md5":"6280fd173e475fb620e7ac1222571eb6","sha1":"07f64e6f4ceb0a0f3449381760971e09744b55ab","sha256":"acd430bf0397e22d565867188fb1373710eb3020e31d68f9e53ac1581d05da5c","sha512":"4728c9b6154b0422f8bdae7e63a6b5e80cadcf272d35b21b4f9e14227c94ca8ce7a47d161eabbfa61e68882f5010c069bfae4e8102f67a771131c3fdb11ca68d","ssdeep":"","tlshash":"4311231e95194a0a0d99c5cc34de662870dced2b4dcb04056ceccb9c32bbf41f1568eb","first_seen":"2026-01-13T13:58:34.4619Z","last_seen":"2026-04-09T01:34:11.946594Z","times_seen":212,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ed6a21b61884d08f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/ed6a21b61884d08f.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1b2-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXCBKbquN%2Fn3%2Ff3fB0%2FYtaQjdyBomVxCbsr0jIl7WxQ4q%2B1UAMq5B%2Fs7pMNwFkRPOsnMHsHEmah6Op4F3Ai9bd3%2Fz9XQPsg%3D\"}]}\r\ncf-ray: 9cd7377bab0309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (434), with no line terminators","md5":"0442542e692edaa8fc0e24f76ef11257","sha1":"6e09219f74d7899ff1af0669bb6f0fc50c99fe2e","sha256":"ecd810778e01141a8506a8c43ae45efc9af39db9dcee69d63703908b6698b3f7","sha512":"3fac299901bf52b2e70581205a980a53951baba329e7e50ce4828f3d0abd3881e7eddccb53b60ae41d85aae080385d3fbb2757536d74986338e921142e6e69bf","ssdeep":"","tlshash":"46e0ab6cc0114a691894c49c7ca8a22834297c3f81c99418fafccb6c7536fa2b11969e","first_seen":"2026-01-13T13:58:34.478837Z","last_seen":"2026-04-09T01:34:11.904898Z","times_seen":212,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/new_casino/games_by_category?category=Recomended\u0026limit=30","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/new_casino/games_by_category?category=Recomended\u0026limit=30 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpTK5l56OMENuS%2BtXweT0hI4quQsH6r1S%2Bkx2JQrD5DEVW%2BgSYG0VOj%2BXWxlGrTNElk3jAUyr45d4SXryJvQvT56Q%2FDKMjs%3D\"}]}\r\ncf-ray: 9cd7377e8b3209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5250,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e4dc5d17a4f3fe546b8bcf15cebb8573","sha1":"83bca715f886cfba1b236e2bd7e311504bb9a05d","sha256":"a1eecd26ef4cd1f48d4b6ab76974cd06b9ba6d8972a59da00ab27409e4d5311e","sha512":"e9ad35eee9e123ff64b71b84dd9dfb7ae822373ba16639af771df3cb3ed59b2e77811651a7819a46e13a1d3ac8999f9cf33c21e61a4a8366545e865791308000","ssdeep":"96:KL84bJwtzmlcV/tmcemCmT5xkGnpBHA0gqdjUZTC3TgNzzyeWg/xV+e:SVbDeSoP9rdQdJ","tlshash":"b0b180279e3d9efdc3282f182dab555ad08969593f84da8ac859cc3586fc4d7033a1f0","first_seen":"2026-02-13T20:54:22.057043Z","last_seen":"2026-02-13T20:54:22.057043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/src/assets/fonts/Inter_18pt-Regular.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Regular.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIccoQmOtN5qs39IcQX95vxlrDR58Mm6RdV5l9BiLM9VtO3NTS4rl2p0iLh2v4L6mBmGp0xl36E2TKASrHekJ7Qy9vqApbE%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":38619,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23725)","md5":"ee4a5579bce6c29bbe697addac983aec","sha1":"f4fba2143a3f87d235e473bd19e125367672b6d9","sha256":"206b0eb452cb51409e568ef16be0599bbb1f6548fc5cc2def659b87fa10fca0e","sha512":"45c59c924137410ed1a026a98b82cf8fbfe2abb5f5bc716ca456b2f9dcd6fa5048d6f887ae4a7a11a745cb9593795a3f9383a3b0e3c18f92397b37588ce4758b","ssdeep":"768:0TyCq1SOkliFlBCRVMbhSteQjVWU/JvPW:JlBgVMS+","tlshash":"8a039717a807c90a996aed1813ff2f2d00cca5374961dc39f7aeca4d0b8157e47e6e85","first_seen":"2026-02-13T20:54:22.059123Z","last_seen":"2026-02-13T20:54:22.059123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/02aa6b5741d4442b.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/02aa6b5741d4442b.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"604-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6gbSE9zfsYTRJU%2FNnftYURIzvp9KPzndyfG72ZJR%2FlsaKJXFjp411K4p8TRAQI%2FUqPt9xsIxByt%2Bx3aDfqK7%2BePq2dVt18%3D\"}]}\r\ncf-ray: 9cd7376a4a1a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1540,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1539)","md5":"f6dbe291f37644afecb063b65b9ba0e9","sha1":"da9a4f08a2bcde5fcc88b6cc4457ba76aa353b5e","sha256":"51759781672a558c143715b20c2139413276ee9451e9c41b79a39f116f298da8","sha512":"0c12ae1fae0afa080da014a805057ea0e0cebef872d35b31182c3280a7e6d75325d3bcdded867040d9cac64f95a36e82c14a94bb4cb0ce322d92599e3fc88f33","ssdeep":"","tlshash":"fa31df20bddc216d982f9122add6ae4d023bf051fd374a5d5d7ce6584ec249420bf7c2","first_seen":"2025-12-25T06:49:05.266983Z","last_seen":"2026-06-03T11:00:10.849899Z","times_seen":1590,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/d822024b7c0240e5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/d822024b7c0240e5.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"4719-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMVHaq8iD2PWZex%2BPe4P4Y1G1SyjV4vdNuobEUVXaNsMmpShMno1ocOs51UN31Jvmv2JPHBf2ehXusNQsrmqxo%2FawRv3sJg%3D\"}]}\r\ncf-ray: 9cd7376a4a1b09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18201,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18201), with no line terminators","md5":"c46e0704609f52028dd7da3d2269b489","sha1":"0203bea38e30cf26f03e1b6c5b77d36d56e68d88","sha256":"783cbd97cd13b1fe44d90998b50d7ed5ec942c759b9eaf7cc76b9e6c67502cdd","sha512":"9a2d88552c55a65393b8929cb929c9d7a49c5a4ec029ffe7af50a98830a3a4ca3c0b5fd47f8dcc1fb0e1bbb9070160e6ab3cf92262e723e38518d3adbb1b4c69","ssdeep":"192:sMQl9Q8496PSNbyjEhg4sktLAwiKw1u5sTcAi5LeL1hU5ZMeuuNjOOpryQjgEzmP:sO7caBMIskw3+0cjeLuZJB48/A","tlshash":"1782d6aeb194f4921fa364a5803f500bf2392976285dd0a0a3a2dcf5b9f415ed133f5e","first_seen":"2026-01-24T14:43:36.827236Z","last_seen":"2026-04-09T01:34:11.947597Z","times_seen":210,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/fonts/proxima-nova-medium.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /fonts/proxima-nova-medium.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/_next/static/chunks/20a8f5afeec60e83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40815\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"9f6f-19b2715ae78\"\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byiLLeA4yNMKkhzjnKnjo99yij0xPedWDpWbV53sVv9SCR8d%2BdQeT%2BKsHvwh6nN6dx%2BYQTJyhep62gswbPw%2FiKHD87puiIM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376fda6009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40815,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40815, version 2.983","md5":"a3d44af54306e6e4ba94187e90bf6a1e","sha1":"6ccbf3d9046cacf709ddcdfc29afc7bd2511fa23","sha256":"4bdfd8ae01921037ddbb9b5e4476a33c53f8f5611be018d830e4bd3971dacc26","sha512":"65c9f02f048219acf441e9c6d7f0998251d6c819ef32f6c0fc3a6119e8fa7b84ec212ca1316f8a7b7e0726816f6e0d1b85b0e9b668cf737ca649465fb8ee6185","ssdeep":"768:X+kz65JzOkJzPPJVOGmHDn5WvlrYwoqR44/aC+Doq9euyjkBwNk2Kt2ySVc17ymX:XO5Jqmp4525YO/abH9B5wNkFt2m1PX","tlshash":"1803f1c659173af4a694906460ad4cc2c3cec413fe487a45a3d66b97b2e3dc9a00ec7f","first_seen":"2025-11-04T01:52:48.77717Z","last_seen":"2026-06-05T15:11:59.667025Z","times_seen":223,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/81c836af9f9b281f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/81c836af9f9b281f.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"6a8-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCb7yNKVGvVuC5BIfU0pv%2BNuu7cEEMRLBurTSPpBSmVEZhxbGAxvoT6Vyr88NjRjmWJd3WRxy1K%2BrvtFsZZRzQWvQNEwF8o%3D\"}]}\r\ncf-ray: 9cd737749a9909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1702), with no line terminators","md5":"88fc2741c51a428c589e5dd95f2e6593","sha1":"27ce73922a6530fdf92133454b54e4b6e8624009","sha256":"52f1bfbc0f217c64485369eab5c4ba250b22e8bad9fd90cbe1f5ae0b13df4704","sha512":"6c7c6d48e3bbfd92965763bbb748f5f7124c11dfc9c1a5e124b0392e47c95d853ac2a96d9db57fdd9b545359e9a030a2036a42d810bee8bd93d1237b0c3354ec","ssdeep":"","tlshash":"bf31a80d484b4eac5921663035c37f6e746c1cd291d6a805c97d877832bbe4cb587e29","first_seen":"2026-01-24T14:43:36.877112Z","last_seen":"2026-04-09T01:34:11.933103Z","times_seen":210,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/new_casino/categories?limit=20","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/new_casino/categories?limit=20 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9NEf4Vjj0UyOfLNCZu8wBACRDi968Aj6QjL6%2FsdGK7vDWsD%2BUNk3hANoiwBO9kxvcZz6BzpiouNXwAIQ1Hr7NQ%2BWtiazFQ%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377deb2809b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5e504ac57d84f1fbd45cdc2efbd050a7","sha1":"c8d6939d41609eb29d257f7739905ccfdf04a9d0","sha256":"d81df02df979d1bb023f72d1139210914227bc3be5ddc214ea8bf2dde7665549","sha512":"7c1c9c8065a9aa2c74d9f9b19464cf5f40bf3d6653cd3088e081e1cbf9a33549fb2e1e1611ec6f0b0d1c70cbc73f1616af22430721af69fe188e7cff3b6806c8","ssdeep":"","tlshash":"14d0e9bd30e728ee6f5a6d04b54b39ab759154133eadaf91c4dc4989f3cbf0c221a501","first_seen":"2026-02-13T20:54:22.063279Z","last_seen":"2026-02-13T20:54:22.063279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/87b4b4c9015d7cf5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/87b4b4c9015d7cf5.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"5a32-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7Rwnce0xYYhGfiloJPkpdmTrUPpQNh2yfa2816C756MkWLjx5Dn7AfhNH%2FIjfGQ0YjMyXraO8I2PdcNuidri%2BSflBzVPQc%3D\"}]}\r\ncf-ray: 9cd7376a5a2209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23090,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23090), with no line terminators","md5":"852c271525fc7bd3eb088f93cfb52145","sha1":"f76a6d150003391a497589a6ff07ca2123892ba2","sha256":"33a95cb3197e7391100464a2f83532693f0b82604e47f34f4c0d609da1aecfd5","sha512":"3eba5e47c8000576e4a5c15aaafc91dfcc005fdb3b0eb328b9d2c291edc85d6445c7a634cb5502b1e1465783402c09cdba1e6a2bb1d22823986bae5ecc0a2d15","ssdeep":"384:FdaQRnz4fn/vxpVSHvHXJXPfPFOCA/MRljvhk2vQvmhEuXqHXKvhy4yNm13QNt:+QRz4Pro/JXP3FOCwejZTIyXqhHNmqH","tlshash":"e8a208923285f1762b970091d43e4008f23a1d39644a602cb6b8adf7b553ccab5faf79","first_seen":"2026-02-12T20:36:03.466951Z","last_seen":"2026-02-27T13:26:05.350491Z","times_seen":24,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/icon.svg?icon.6a5f09d1.svg","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /icon.svg?icon.6a5f09d1.svg HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dugG%2BtR9BHyAKv%2FNTHcHeirVKfBpArNYAl0%2BsQkH%2BvnP64tFUxQT7I0nbeSSWyQmIb%2B7nSwtX0LTd8J0X2TRjBaZCrdneGM%3D\"}]}\r\ncf-ray: 9cd7376efa5a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d463307224bbf1e821b1a38b65fa0269","sha1":"98c13ae050591c19768fc5dd32a6fbc9038e3cd1","sha256":"5163f65b0d9b8b660d5fef6aafceb1c6264cbfed84b637da9e78e86a3a9a6910","sha512":"a9116506d381fa3eb52f4446408b1e4fb8ce00dc004bf58b29c96ec41dcb5eb57c31c5bfa3395e7455ab87ae53fcfae97950b98b5d946684cb4a839aafb0b740","ssdeep":"","tlshash":"647188fa53c8b6d0e507ebf0cd3614346a5b28febf55c28549aaade9e53144d8c9cc80","first_seen":"2026-01-13T13:58:34.43113Z","last_seen":"2026-05-28T13:56:00.598868Z","times_seen":226,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/56604a82a993fe8f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/56604a82a993fe8f.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"722-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vhc9eyrwsN5vGOAr%2FEN15HuWhZ8RY%2F4GYj6jJtfXQtH%2BjBfNA546sWbTVV2GzpTk79v9OaUi%2Fwbf96BDlwYt%2FM%2Bt%2BnjbudU%3D\"}]}\r\ncf-ray: 9cd737743a8f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1825), with no line terminators","md5":"9eb6e3c929df6cbe6bb340a68a27a591","sha1":"46c44cd8619a39864e91c811fbf91c6fa9270d7e","sha256":"904c4dc09a88fd81921baf9cd2fd908e73b62d1f6716c6795f5b0b6cde73ca8d","sha512":"141360b9ac89324ddb713a8950ef2b1a4b604f72a0bae0a182d4760f9fc2b5c861dd7e890b3a6ba858d4b1cf3edbb907698707f88b3c2035db1ecd5b5ee08928","ssdeep":"","tlshash":"4631a50e2614a97a4b40027a398bea4670fc24c50577bc14e9fd434c13a87bc72a186e","first_seen":"2026-02-12T20:36:03.635175Z","last_seen":"2026-04-09T01:34:11.911881Z","times_seen":41,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/cae916aab1a61617.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/cae916aab1a61617.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"2afe-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZLshJVDPhOSzNRJr9XFb%2BqlEaJHO4MR%2FxYm04AVDId8D97XIXhfrb%2BLAOwbfLn0jRy063uEQJ3dBHovKpt86GDtVFpZHUo%3D\"}]}\r\ncf-ray: 9cd737748a9609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11006,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (11006), with no line terminators","md5":"90203a7f5cb3cc5af6c182dfd6d00a56","sha1":"03a1973dedc17842bce22e84edf63834e9262047","sha256":"64bf2521fb0100317768a713ce65d634a74945a317f0888d666263866b614711","sha512":"40b613c9080427cace4386b9ae2fb71c36ffbeca6009f1560c603372f0636a63326c24a6061d9619dd0dde009435087681530cfb1bed145bf7ce322b55ce894e","ssdeep":"192:qQ2sLHXYsP8oU+XkXvNpbNaKHVeme7FO5B8fprfUvXJASuit0l:As7n8oUiaNZNx+Q+pbUk","tlshash":"aa32651b962031be0692fa93a65f3593773ef0e43a02e59ccfadc0581359c6b41365f9","first_seen":"2026-02-01T14:00:57.541104Z","last_seen":"2026-02-27T13:26:05.315119Z","times_seen":81,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/596affe72e2d3582.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/596affe72e2d3582.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"3324-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNy2t3H7DeoQMDexbUBeKy0IFm%2BZ0WQs3fyNbQ9U3rgzmu5uphPXJvqkbCZOb0VqbgpnDdrbyqA3SZrkkVjf%2BjCaIFMolm0%3D\"}]}\r\ncf-ray: 9cd73779bac409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13092,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13018), with no line terminators","md5":"16705af47120164cc3ff54d388c4cc71","sha1":"e11c36551847f1b78eddb42f5cdbf8b31fb02da3","sha256":"c911f1629ce8d1144c1fe5f176a76edaf5e01a0060ca03e1a0a94bd3531a6034","sha512":"d99fba187ce466582f440a090346354d98ef84e2b9771c361628ad1d318e4b73bb84a258f93d10bf7b5df6a6acc460ec3c20ef109fd9ae599429c194f51ae1c5","ssdeep":"192:yGZic0tjr2xOKiyxZuW715N+vtg07XU+filJbSbZpddtCOtHksW67XMUQL+VP2FH:hZifuOKlZuSEvt9/SM3tdtzW673mR","tlshash":"3042b50bc61416f127af0172364f7aa2bb3254296ff4f087c869c16c23eba5e51375a9","first_seen":"2026-01-13T13:58:34.525662Z","last_seen":"2026-02-27T13:26:05.364773Z","times_seen":195,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/20a8f5afeec60e83.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/20a8f5afeec60e83.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"21910-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33PmpImqfn3H%2F7VcQn%2BFYFGuIl%2F2FtwkMS8z2gVlZrBMsHmPFOusz%2FlIgf6SL5%2Fp%2F9xQ3n9pYRhEhautiP71g29LtmIykfw%3D\"}]}\r\ncf-ray: 9cd7376a3a1709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137488,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c894aabf0e87df238c7c13f7d6fc6c3d","sha1":"b811fcd23813709ddae401364a1d4914fb3f09d7","sha256":"a9a214be3c75f6e023ed8736b262dcdb823a3e64e3729e6596b9659e011bcf95","sha512":"24e31ae9305eeb0c4ae4f4a96d92357ce483c3e3cd433e9221f7ae6558b7ce48a7a31ca5c59a7f7edd7d856dbee601ffedb8c828a7b359ac41186ea355e4e6c0","ssdeep":"3072:cQZB56hAF7fkpRObf0R9LekLOZv8hrkegp2G4XhE6c3x2qpiOWMlxoMlparDOm0x:xZOhAF7fkpRObf0R9LekLOZv8hrkegpn","tlshash":"e2d397a16327953fbc1b90f192f9bc8c712bb291ef2617e8fd51212267c1af50d26724","first_seen":"2026-02-13T13:23:25.071329Z","last_seen":"2026-02-14T11:59:15.55084Z","times_seen":9,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/src/assets/fonts/Inter_18pt-Bold.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Bold.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6F6%2FDmgAJNQc3AfgoYELR4pqUA%2B6%2FWWJHOCkORTh%2FadIpUc6y66nCC3KpiuoeK2kiHH9Bt1pmifMWIyDT%2FiHULUbARjF9E%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":38616,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23722)","md5":"ff86c903d03e02b24bee35f0d4b2bb88","sha1":"c10c64e907ac1d5c54a35a7d1ac8ff2ac7487be4","sha256":"0b5bbffb7611a82ea0abd6172047e5dc143cf872b6042e29335e99b70e8fe274","sha512":"e27daa91ef4ae70b9ea2bb5534035f9e7f088785dac842f13764b2b914c092e3d55c95e59a801d086c6a4bfdca08e32a62bebcefc44ddfc80c5afcc888adfb05","ssdeep":"768:0TyCq1SOkliFlBCRVMbhSSeQjVWU/JvPW:JlBgVMS1","tlshash":"52039717a807c90a996aed1813ff2f2d00cca5374961dc39f7aeca4d0b8157e47e6e85","first_seen":"2026-02-13T20:54:22.070865Z","last_seen":"2026-02-13T20:54:22.070865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/2bc53bbfaac611ff.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/2bc53bbfaac611ff.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"11b-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQzQ2oKqyQfFJ3WXpUaUAb53FHMT%2FXq4%2BjEx5XsCBsQVNOQPtacRTza54750QcHc5Osd1kYMgXe8zM6weWSLUZWUH5Z%2Bl9E%3D\"}]}\r\ncf-ray: 9cd7376a6a2d09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"eb3b5cce160f2d44444de994c9921c40","sha1":"9813bfdff1e5ee5e8744374a3f6a1bb9d6f5df40","sha256":"abd06ab35cca99c1cf56473e473187d8b7b6ea3a062f4af970cc2000b3b1dd80","sha512":"a6577f4fa3ff6e5b20200bfc7c1df1b3efcf4d320c5992426caff2e37eb19393f7c7a6e4953f3ee4f60620accb1180978e02c5b9340a912b125356557041448f","ssdeep":"","tlshash":"b7d02b703150f8d44086a0cc8836424bf53a757262fe3495d7ae8cf16174f5d51e1a55","first_seen":"2026-01-13T13:58:34.452804Z","last_seen":"2026-05-28T13:56:00.633322Z","times_seen":226,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8f930a8b3cb46897.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/8f930a8b3cb46897.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"228-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyAg1mCAILgGZHjIWMVL1uN%2FlIXSNCo852v0lb9qUJXdES0jjRNIg3SY7MKjcEqATj3ImKLfTTO9%2FRjMbry084ox5Uw%2FULk%3D\"}]}\r\ncf-ray: 9cd7377afadf09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (550), with no line terminators","md5":"b192b337f0c29559d82b0cd04d321993","sha1":"9d0e362c0a91e4d9697138bcb730b85b4d8484d7","sha256":"31de4a951fced7b4390ef1aa19880534c41694301ba2a83657b11d3a05bd5cb3","sha512":"60211d0b03b6f968e15b738db7596a40831763bac184ce9c4b061830f40ba9715af4d667c96c3387072789780920b3ee730251548c66cdc34df5eb131490e7b7","ssdeep":"","tlshash":"c8f0c08cc304706cbc4a13f8f7e59e3d53bc0c95e1d99508a89f4f6c2239519e0aab8c","first_seen":"2026-02-01T14:00:57.533869Z","last_seen":"2026-03-15T20:04:55.158975Z","times_seen":97,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/e1042c89d2cd85f4.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/e1042c89d2cd85f4.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNnlO5t3HBPQ5uI2aOfxJgJA%2FIYWLA5vUf1ThixWw8aX4lGpZvTVTiUvJfRQ6HxWqwccl928rscGBAX%2FtJe0NHfzMLEr4%2FY%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"b7-19c583204d8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377bbb0e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"2ae144f1fd17ea24a3437c9e34f8e4fb","sha1":"833cfd723e5add0e7a3e97851942b5309a34c059","sha256":"22d7b075d6ae6d440287ae2f66d8da2613294d16c3ff8742c843300f520c4045","sha512":"b6cd4ff980a8143de7f539a165d1de7fc7a9c8726fb9875824644d72d1505d8ace2f5693265860b7f55ff6b1e339ed880bd2f0148701eaa496e172c5ca2112a6","ssdeep":"","tlshash":"abc0803548c1c4ac610525ccf5775765b46c2474d1dd1419d17e5e759165f2c594118c","first_seen":"2026-01-13T13:58:34.404211Z","last_seen":"2026-05-28T13:56:00.714041Z","times_seen":226,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/f2afc885ae0a6bf9.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/f2afc885ae0a6bf9.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"13eb-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fo91hsZiabEf%2FLrWIdEZAYvvEXLI5TR8y%2BtwRhw4fAAXsqoE6j6bzLI1GCTbUYxCp9an2Pzc7ihKdsraVMz%2FUuX7P%2FRaZG0%3D\"}]}\r\ncf-ray: 9cd7376a3a1809b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5099,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5098)","md5":"646cc2326325a7d74b6199449eef2e41","sha1":"ad05af4a1c854ca3055e0ae8516af1a67730cd73","sha256":"cdf99da0fa8660b006e81a64c934023a4f12d74170afe7d22d7663abbe284f4e","sha512":"08018899bfbfa938b07fae1eb3983252762f3ab28dcfda61945d887f6ace4cc6b7caabb21c5dbb87e285d82a208581b7a5fd40814ff1c578926bf3e6dae0b82b","ssdeep":"96:artwd5qWfR6s8VJkUa5elmHDUzyXQFuQYfI2eNMlP9DcphXEbk2k+sfTUVh:artwdEW56s8VqUa5elmHDUzyXQFuQYfF","tlshash":"b1b11c060bd90d1b264a4a52e4ee1a50c9ccdeb754d1cece170e10e61e9227d23bdbee","first_seen":"2026-01-13T13:58:34.526571Z","last_seen":"2026-05-28T13:56:00.770204Z","times_seen":226,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/src/assets/fonts/Inter_18pt-Regular.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Regular.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLifZcmVeheSa%2FRhMLaUNhXC4WWVTPVvF%2BUMQZeifzBD%2BXl89zwCahpgs8DhTQBf8BkxaBgstRD6g99gMZSfP3Tp30lHExQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a6a3409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":38619,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23725)","md5":"ee4a5579bce6c29bbe697addac983aec","sha1":"f4fba2143a3f87d235e473bd19e125367672b6d9","sha256":"206b0eb452cb51409e568ef16be0599bbb1f6548fc5cc2def659b87fa10fca0e","sha512":"45c59c924137410ed1a026a98b82cf8fbfe2abb5f5bc716ca456b2f9dcd6fa5048d6f887ae4a7a11a745cb9593795a3f9383a3b0e3c18f92397b37588ce4758b","ssdeep":"768:0TyCq1SOkliFlBCRVMbhSteQjVWU/JvPW:JlBgVMS+","tlshash":"8a039717a807c90a996aed1813ff2f2d00cca5374961dc39f7aeca4d0b8157e47e6e85","first_seen":"2026-02-13T20:54:22.059123Z","last_seen":"2026-02-13T20:54:22.059123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/d9e6e3ebb90c165a.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/d9e6e3ebb90c165a.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"709-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw92z3x5v4MKb41Wz5PcqSrb0rzG%2F%2B8VqnN9qcTIkFqHd4zQOLuJYp4IfZ5WNsQwPgToUZ0kS%2Bu79mFd5lggJvG%2Fv2ZCIJk%3D\"}]}\r\ncf-ray: 9cd737748a9709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1788), with no line terminators","md5":"9d54e3d679627817f137bb46cc910456","sha1":"813eebe75fbb4ba1a51e02d1bc841ea389750020","sha256":"180d95eaf15582acb3975951ade6b15df0b1b710e537e61b02866b0a9ed5eb4f","sha512":"d546d0400933ce1b79826156420e6476d6e112346a8d9942ffe4557fb06fad7ac9b1a5f208b5bb3f87de0f77f90b332f5e4b925fe3a8a92e1a027992ab214507","ssdeep":"","tlshash":"a131a70e5318572d45a2e19a3fb7298fa3391122138ac054f998467d32667ecc2326fc","first_seen":"2026-01-13T13:58:34.47663Z","last_seen":"2026-04-27T08:35:58.66008Z","times_seen":216,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/6e7332a64713445f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/6e7332a64713445f.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"56b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzUxFuQWINdsCzSAa5V82WDvJzreBkGbtaRQX0WMPQ42QEIXXui63cWGP44iSPGbovqQNMgMPH1Lb31Dqd%2BKzqoSXnXjVyE%3D\"}]}\r\ncf-ray: 9cd73779bac809b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1387), with no line terminators","md5":"640bbcc093f54267cb84eaedc629e5b0","sha1":"c1d3cc52ecdf674d8248abfd9540e7632fbaa44f","sha256":"95db70d4b5e2a13349b7b285499ed4f2f3cd1cb5faf089e35e68a3296702f5f3","sha512":"d977fbe41ca2531ff4c86b602ec807a872e89499fbb05f17aacb5d8692502d10617d67c1f0571ba8cb8619122fce6adfcd6717a63c67743728062379d6ed5d39","ssdeep":"","tlshash":"3b216346f50960f70ae973073cdfdebb61ec1044862a04249edecc3d03f0599dc1249a","first_seen":"2026-01-24T14:43:36.945615Z","last_seen":"2026-04-09T01:34:11.934618Z","times_seen":210,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/aee865646d5860e1.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/aee865646d5860e1.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lcLttliNf%2FOTto59vBy%2F0GR%2BfnNy2n1tzrXBr5zR0wDStJJyCcRiczNQkyyR%2Bhaac%2BuLfj0il6coELsC7Ks6tbUSgnwLgA%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"e4-19c583204d8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377b2ae709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"219ef309b5647971e066190aae0f3412","sha1":"bef77b2f601015a52c9e4848817f0cf7c1df2ad3","sha256":"e3badaea9d2c9c08613a447a709aa55ed1d67d579989a8f59a21b1185967ca56","sha512":"a47993aacd8833eb12e01231e30e05957b7a49ee93b46546c254243b9e822dd3aa5130a8455d1a2b47e1b333faab29efabf91da4488da132ed3b3d99272d0f29","ssdeep":"","tlshash":"9ad023150113ee0c100760cc703995557c29753211ccf009e05d09735238f6b7191274","first_seen":"2026-01-13T13:58:34.418244Z","last_seen":"2026-04-09T01:34:11.884277Z","times_seen":212,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/48588e0decaf8cf5.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/48588e0decaf8cf5.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"627-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BvfKQAVjjLlvp6du45COKliWz5pRB3PktvZEvnOudOK99mhNeqbe%2FaBgROZY19Q%2BMUFraJ7s%2Bck56dEOmDXbxiOwuB2JO0%3D\"}]}\r\ncf-ray: 9cd7376a4a1909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1575,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1574)","md5":"c50f5acec3948b0dca5f7b44510afea2","sha1":"c3ca6a42f9cd5b9ac2ddb7bef515fe3cee9c04d6","sha256":"c4c4901090b690eb4c495e4da4ddffc8964b2be727128aa8c1eb88a92fa3fcae","sha512":"f7a67ad2ed69fc996601fba9f408198f9aa454a5f3ce9ed8f10bc949e7a856aa4df257e94d1c7d831d139c0ca15aac298e4bb0a9a94384c47f7d42a9d8cee4f3","ssdeep":"","tlshash":"d431df92964ef394f822584d5158b6be1a3dc247a3171f79dc98eb3392c63c74028617","first_seen":"2026-01-13T13:58:34.506606Z","last_seen":"2026-05-28T13:56:00.781383Z","times_seen":226,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/bestDesc2x.2d44ae82.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/bestDesc2x.2d44ae82.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 545439\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"8529f-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKTakVuzMGpspLsibJ6%2BfFaPgW%2Bgszowxb4R7B6qybvny3yjIydD16bpGUix2yxmV9%2FYT1R%2FvCtzAu0ggjiy5VfjX1wNExU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a0e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1152 x 500, 8-bit/color RGBA, non-interlaced","md5":"c2e236bdab428831ab0e60e665a85ec0","sha1":"aebf151daebd13412131a8d8a87c32f85b5d7581","sha256":"a5caa9f9903d2d09ae0ade420bab761c51d2de750038a44dd7d859abebcf0bcb","sha512":"f4ac5ee3150c0e6e291387f35ae672ed61d7e01c2d2b63aa18debad43ec999d7ab894cd3c61d7c2b541b5bba6b776725f974f0d812092bffa48ebdbbcc95728c","ssdeep":"12288:2xytjTIYCXWdBM5OfUraQInwnAQ8EU9xpnNDn+6xjeN7/EX:z5IYoodsCQ7UXpFn+6xj8/8","tlshash":"32c423f4ddfddb2152e21367868d8fbdca5b2a2320b2d79850a0e8da97774c3160b51c","first_seen":"2026-01-13T13:58:34.455252Z","last_seen":"2026-03-05T13:40:52.737041Z","times_seen":196,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8f03b446eada2a30.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/8f03b446eada2a30.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"44fa-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bbj5C2DNHmifgNBt6MID0L4d1Y%2FL8lwSgj0IAbzuJR053S54K3R76bhou4GLXWDnYFVHYMXbXPgVPu2LlfgriqgGdsJkGKs%3D\"}]}\r\ncf-ray: 9cd7376a3a1609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17658,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7779)","md5":"b1ae3e29d39df3f4d592d319d4ac991b","sha1":"c203e6fd3695ce74f2dc721adc262c5f965ed529","sha256":"035a7de337fcde320a4464c09d7948720b0b471a9b8f5ca78f42f9e0e3cce7e3","sha512":"8f22c6e182eeab38779cf557a30efe98151b9f5df17ad3e7e2f3af1bf5782908fa92d907ac7575c65ac0faf32359d8683d0b772ce4d56aa3a6ba36d838e9527c","ssdeep":"384:p5HpiNEoEhGcI6iXP/PsPwP9Ph0PvP0P8PPPyPyPfPz0PtPWPpPtPoPMPpP90PbQ:a4xI9Z82bhG","tlshash":"ee8289b906af1e7dda7d8690d4454f978bf90079bf690cf4c28c9a6b9b5c404c1bb84c","first_seen":"2026-01-13T13:58:34.510579Z","last_seen":"2026-05-28T13:56:00.807233Z","times_seen":226,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/new_casino/games_by_category?category=Minigames\u0026limit=30","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/new_casino/games_by_category?category=Minigames\u0026limit=30 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMp3EjmTUJpOuBYVy6P7dAAy5Vt2%2BjhlrWulIbV86TgOXpDQqMCeVM8Ks3n64141xY9KuphrV6rDo99tNDVJ8NLwlc8kD1o%3D\"}]}\r\ncf-ray: 9cd7377e8b3109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3d89f468fee6871cd6bc4b161ffe800d","sha1":"3e26b138a9b88fb8c4b5cd92e8552e896cf9367a","sha256":"2448aafe522fe3de4eafdf1788e6ffcb62cb83f9c5aa5b7e5c5b2ed2c263d562","sha512":"ff3594ae73228b54d86c46ca7d4e55a46b2fd9ab90cc06bed2f3d749a8e0d95dc3f00baaf6ee4ed844cc49f03d95891ad1e67b8b1ff8f89b1ea547c99b3e96ff","ssdeep":"","tlshash":"99213f674b3ddbf98b342b003e9b714ee045766a6fc4da87e89acd24866d4d2037a170","first_seen":"2026-02-12T20:36:03.530881Z","last_seen":"2026-02-23T15:31:45.845777Z","times_seen":23,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/s3/casinoicon/1947.webp","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /s3/casinoicon/1947.webp HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 233819\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"77b432e650a578fda6cb2e80e3f0d165\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B08C0E1A08\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fe%2F8H8eZYQ3mNn9AVgUgD3lGVUFp9BGGqJvajqzKlyFUl8ovqflAAbCnPpkLEWcrzbqSXJwzsELe%2BQ9iyzXeQqOms2wGFfs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377f6b3d09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":233819,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 360 x 472, 8-bit/color RGB, non-interlaced","md5":"77b432e650a578fda6cb2e80e3f0d165","sha1":"20b7fdb548c7d9bd6e142bde227dcfdf47dc979f","sha256":"311e0390e65710090d601accc083b7d91009f56e5caaa87beb3937594531c334","sha512":"49b62de47e5d98a97c5e053dd6a15c8a9e572671f47ae3121234dd493105e3a8b327d69c313e943af8ec0d232423726dbd6efea40d2dd6e08852ed9eeddc896f","ssdeep":"6144:O+/S+DfoZS6T1yt4Mvr1d3cgx3bryXdesJaminBoikS:PfQJyuMheE8znKjkS","tlshash":"3c3423683cd3c5e251daab4a64b6eaa48ebb798020cc9ae42dc14347b7ff01d5c83535","first_seen":"2026-02-12T20:36:03.508374Z","last_seen":"2026-02-14T14:49:07.54521Z","times_seen":14,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/4694ccbf99661862.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/4694ccbf99661862.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"64a-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHNnXZWNTJmPiNW%2FqOvs7TKTh3xilkfVgkiaVmeViXzjDzAj2pV3ZASYOPFfYTU0hiajsj4vNEWpxX9vE6AXkcko8aclHqE%3D\"}]}\r\ncf-ray: 9cd73779baca09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1608), with no line terminators","md5":"08ec2b2d9a695fb9ba9373c1282b593b","sha1":"7cca762ca195d4c173c33ce95e9ff64237ebe964","sha256":"ef81277a962f81ed20594a1778caa84d15449f34a395f4fd9cf39c48dd7c535f","sha512":"fe1df58d8ba5e748b6f61f4d2e831e01cbce5755981f18bb2d383dd74381bc5e84977266f78faeed46fe599cc9e8714ba8572d61ca3620e113a5cd9fb5048f9f","ssdeep":"","tlshash":"d9317316e5000bec031141a2a07a2af8b06d1118f3bb4d96994ec56a62bcf79f13f3b8","first_seen":"2026-01-13T13:58:34.496506Z","last_seen":"2026-05-28T13:56:00.644714Z","times_seen":226,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/profile/notifications","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/profile/notifications HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6T6V8%2FsECBMEnD4YnAgw30rt0%2BD4p9j2pHHbLRcilbrQYQQk5eiLcqIMN6%2BhUvwE84heret%2BFLP3eNeTgbEAP3cloU88NS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377deb2509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-07T06:35:17.085547Z","times_seen":16009,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/f46b8a1c73c0617b.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/f46b8a1c73c0617b.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"b9e6-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCGoKbxNtPu2X9jLA462FfC3VIPF77pjkLCgCW%2FgwYj%2BXjOeTRXiM6W9Y%2FJY207sl3vibNpXoMWJJx0Tt4WhLNOxvuSbtXE%3D\"}]}\r\ncf-ray: 9cd7376a4a1d09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47590,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (47590), with no line terminators","md5":"6e1e61acf0ec39c69b58f66064941ce7","sha1":"7fb45e5309b2afed15a3461a3b55dab37b95ac92","sha256":"d1f0a82a2adab5ceab302a8ef6af408340d90f0184b789a7160d6de4dd9b9bc1","sha512":"7a5be9f39ac0668184ed3ad8e2c078da5b6787cdb2245b085f44fc7875b61fdb955d1c0294f43fd76134cbbd7a9b1f9f7db74ee2536ca56c7cbaa410c7e03917","ssdeep":"768:q5Mvs8TRqnxRxdP9lsJr4fKT1LpvwutT8kxBMh8iuX:Y8TUnDxdDWr4fKxLpvwutT8WBQuX","tlshash":"3023c5e931d5f48107a780e5c42f101bf23e4e36149d64a0e3a2cde979b495de273faa","first_seen":"2026-01-13T13:58:34.511503Z","last_seen":"2026-05-28T13:56:00.659469Z","times_seen":226,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/new_char_glow.420224af.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/new_char_glow.420224af.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 2079806\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1fbc3e-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXbVkw60qDLpxFc8odbSUXdtMyQn54ver5C2OsLAY3ZYOCIoTHUq5gygozSgHfvEE6sLqEF2C%2FQ6opASQO6KJSWjMscKWnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376fca5f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2079806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2004 x 900, 8-bit/color RGBA, non-interlaced","md5":"de8b5f4ad3a7749af2b0246539a7b503","sha1":"c4921b7c013e54753a2e6353e52d86a7cfb66540","sha256":"0559e1c19bffd0bb46dd7e9dca7b1add88d161ca95a6100d3c7271d8da0174bc","sha512":"c49f7e5044ee97a5c48aca500c80ab7b98f3657fd5699e31320ecaf8c253066e4611d960391d7f7089affaabcadfd5b901cd3bb977c27c1cc369c49890c43654","ssdeep":"24576:SDoHadAXT90KnJ3hVdXLZ3+fzgQamJJrZRuStfEZqL2/NLvb8VcI7u:SM6dAj90KnJxXLZ30zgHCFQStLEvbiFu","tlshash":"952533634384eb7898adc0e87d9c7af87eace06174db144c5011afda93a90d97f1a7c1","first_seen":"2026-02-01T14:00:57.555193Z","last_seen":"2026-03-05T13:40:52.670047Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1548,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fhorceracing.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fhorceracing.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9991\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: 8t_7Nb36VAzLmKbzxfmqIPuduN-JsS8NnJ2qM8lnH9I\r\ncontent-disposition: attachment; filename=\"horceracing.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOCmSwmf6UO2QNq4fqKzHVBEDKSqbUmlK9U0UPi6LlQ%2BuogaAqpfD1kXlL%2FnmmCVmE4fSAyj8zl4ioB6fetTToX9DLjfhcw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737712a6e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9991,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"795eea1c72be311121d61c6b82f788e8","sha1":"79f1e59c1707801bc757ac6f6d6ac00bc20d090a","sha256":"f2dffb35bdfa540ccb98a6f3c5f9aa20fb9db8df89b12f0d9c9daa33c9671fd2","sha512":"29d14e6bd7117d61f5b8c1ee1c3a6162be96bfa9c5974167fb6c7d2e26079f9bdda0cae2bd4c00dda27af094a490c6386dbca4d68e9ce3d4066e08c355685e44","ssdeep":"192:rGPvPkJ8shRMtajQ4YQpBv1u4R4P0lkAsts94SsFcTsvW+2wKqj+8Pocfk34c0o:rKe8sh8avpB9U6ktsMcIW+vb/k3D","tlshash":"dd22bf24b1509f62d01500f5aae47e6629929ed3dd37523a8c8d7c4eed30f72b2d4cb8","first_seen":"2026-01-13T13:58:34.422271Z","last_seen":"2026-05-28T13:56:00.832296Z","times_seen":209,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/aea6d8ed908afa0d.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/aea6d8ed908afa0d.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"152b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNYlskXjVyc3y%2FgsQrUqxLf%2BTaBFu9Vhw215bsoza8VKfMakgNpLXItrvgc3JjMdPsfJxjTZYRUXWimtzMrwlivdrwezZX0%3D\"}]}\r\ncf-ray: 9cd737748a9509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (5406), with no line terminators","md5":"3d2e23f6d8c9c4a994917eaafe374872","sha1":"9032c9f3b9c766447a473b8ac1ec8e54e5b32685","sha256":"4446b6c924429a47d7e7901971e98d3930a9d17c1b9588568a4af4436a9a827f","sha512":"260ad26d28f4e64fd12970f9d5b26fa252c6cf90fee43df8d843bb7731b716a1ef5fe58927d000c3da920b365b10fd77025ce1fdde6176d121714bb104501780","ssdeep":"96:tk6BEmzi5fGN1u6HbRJuh4nUPomOoxTcekt1u7SrS8+xipty0sO/83gPAUCHnw9x:tkEEmzi5f6j7j04wOAGtcSrS8+x6tycV","tlshash":"1fb19517b718326a07d34051baef859da37955247371a9aa5ea8c31c13a21bd93333c9","first_seen":"2026-01-13T13:58:34.455977Z","last_seen":"2026-03-15T20:04:55.125738Z","times_seen":211,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/mines_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/mines_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 539917\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"34e7d126f4f8116818cf1b52e7f1d7ef\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B093A9C396\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17012\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6g11pRSFG7JiHMLMRjpdtnrmuEHkZ92iNDqlgv1luylg1FedXmscH0Q3YUSqRJDIu5zEw1t8zDttfqqmeo4iRPu4EX4LyDDKwkf3q4Jw0Q%3D\"}]}\r\ncf-ray: 9cd737800de40a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"34e7d126f4f8116818cf1b52e7f1d7ef","sha1":"9d1d4360ba255ec8b4874e281aac3e99fd66dd8e","sha256":"99d89e3a4cc0dbd098440f31b451d8174f874713d0e3561492e688632795019e","sha512":"60e6e5da6a30bfb2672f558c910c4c21de2de0f0874f7bcbb45ceab7cf45dd8379395b4c70412f97f3354faedbcabf14f8e59559ab10306485b03a36704d1680","ssdeep":"12288:gQt7KAy9mtVB+IzoI8o2AbkJOUmAA0w17dkBYHw0jdhK4alpNWbb1:ghAyo+IQobkkAAf5dkKQ6h9aUh","tlshash":"3cb423586923ceb850ac3878f80bd9fe5f63c479e549239cec800a65f2d5345b5af6c4","first_seen":"2026-01-30T07:25:15.971019Z","last_seen":"2026-04-28T18:07:01.632919Z","times_seen":172,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":108,"dns":14,"connect":8,"send":0,"wait":64,"receive":184,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"bd30-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUb9bmbiFtwBjWpfT6PITJ7Cfc8rf%2BXoAVsQkwvQMXMKeM0u7v9%2BvWHu88nK%2FOcC1HjPY6RF1AtNGrIr%2FuM1G210HXbsRe4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a19ff09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-06-07T08:09:16.321809Z","times_seen":63907,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/officialyDesc2x.88e65a07.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/officialyDesc2x.88e65a07.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 401447\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"62027-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ff%2Bch35JmzG8WRd8h3oxPo003FFcqrQU0b5I8BTK%2B8VQXdkaDlD3hxydcXY6AcXt1ZVRnJmQ9t8SlGjjJ%2BWOGWNgFYFSLPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a1209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 918 x 500, 8-bit/color RGBA, non-interlaced","md5":"8add46b11504424ee1bb87d90f42d35c","sha1":"0b8bf53069787b28119c60ebd50196f3dbb0a814","sha256":"523d127a29906be33d92631a2ce969a94586564592d9ef1b44dfcefcf4402859","sha512":"70bc77bf89abffe974c8404be4e41847cf2c6a1be4069c402223a4ee9b1e1148453ab33f376405ffb8849a4996da9b00c5e4ed610fb2edbfd170d35c96023686","ssdeep":"12288:t9jF8XpicZBqhFRPS6/NgTIuz+p4fkQMQ:18XrZBAFxS6FFuz++kQMQ","tlshash":"eb8423a0d5707c87c6b81bae51ba369632ccbdce72a799205f3463a7f0460ce4b31675","first_seen":"2026-01-13T13:58:34.416501Z","last_seen":"2026-03-05T13:40:52.687255Z","times_seen":196,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3a6b01cfeb015c57.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3a6b01cfeb015c57.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"5f6a-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxSADvNuAg79aDPpkd8bceaqS6WcKifMBzwNd6m7NV%2BFEQNtqFbuP0WsucSSPevQGZiihaHqonWaY4dftURlZeuhG%2ByLBKw%3D\"}]}\r\ncf-ray: 9cd7376a5a2109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24426,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24426), with no line terminators","md5":"849d648c329865aa5ed3f1e2c14d059c","sha1":"880d8199047079dfaf661f6acec42a9637f7c6da","sha256":"1b00d35ff042cf7523b58bd3c8cbe2f2a281d72d340cc0733de0c702582b8ea6","sha512":"36dcd98a083317d0b14f908143dda335a9c93fbdd9bf73ef43245dffab6f719a6abddced0a10eb156cae1b4b1a9e52f9da309873cbdb2cdf30e5aebba284bfa9","ssdeep":"384:cJsgw7D8RoKa9otOelHwd9OcrqkYPE4cZUWu67YrNg76Y9K:cJkDKtOelHwd9OBM4cqp672KHK","tlshash":"81b2f9ccb193b0201663925650bf510bb1bd2d5ca58ec058f576d4ee2ab798d6333fb8","first_seen":"2026-01-13T13:58:34.519367Z","last_seen":"2026-05-28T13:56:00.661898Z","times_seen":226,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/e871c8e1d1ee20fd.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/e871c8e1d1ee20fd.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"8604-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOco3NvsWYbVyKjGlbDlx3qmQvigudF9o3xdQp6esJhiWCdoQodM%2FktA26Eh1RyssdMi1beeuC8xURaUftrSeJOhJwEH5IY%3D\"}]}\r\ncf-ray: 9cd7376a5a2309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34300), with no line terminators","md5":"c2dffa441f0329b72daf658aff5a951f","sha1":"44ce281e39dc390a699d8e2056940fc50b68574b","sha256":"4b90042c9ca22ebfb887fee2c77600db1eaa7506d1ee395fc2d13b87f8a396b9","sha512":"43b86b7db58da455844acc757c52622f2be11f7d7ff082ae4489f74d2edd18c2f61e9ecdedd0268d8a97754cb428bbae8afe38964eb40b5b53cdcd04f0633f1d","ssdeep":"384:yvQIkjOEx76ctwGZAE9l4P9m1lEkWFHWYSGXwz2NdCCVlC6L8ZkYgaJGr7FCp+Ck:yILXZAEim1lD2dleWbCzhRgi9HssE","tlshash":"ddf2f9a57251b22b7adac182983e4019f2296d18140d402c76edbceb75a3dcdf1bbf35","first_seen":"2026-01-13T13:58:34.387972Z","last_seen":"2026-04-09T01:34:11.940421Z","times_seen":212,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/c27b67ef6a0f108f.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/c27b67ef6a0f108f.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"2b7-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJlecy7e1zgfl7yv9ASMmBBV8CSXpn60AN1tNmos21X8roJdcYEr6HiFY2aCJnc3MAaYK5OvJFYjImEnAe3vfAPKEBftn%2Bo%3D\"}]}\r\ncf-ray: 9cd737744a9009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (695), with no line terminators","md5":"ff0eb9aabbdb9fdc6ad98252b61c506e","sha1":"0eba3616a5030214482282cc168b067b5cb8c4d2","sha256":"c44cf68447b11b233ac9a9fc6ae9971e30f6fa7947a68e75ff0d8d319b567ca7","sha512":"2a7d015993fc6f1f48688f90725641fdef481eeac34eaaafb4c95235159af212e574526e874aa5d8b8f00777308b2b841bade1f9bddc66318f53b99c23d3affd","ssdeep":"","tlshash":"7a01cb16404aa9f41403532ce596333e76380ea7c0b7260be15f272ad1f0d58628b238","first_seen":"2026-01-13T13:58:34.497392Z","last_seen":"2026-04-09T01:34:11.899423Z","times_seen":212,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/9b2ea8df5b4476c5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/9b2ea8df5b4476c5.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"184c9-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBCUmyQL4faDjyHtBf2qGQsXtoBmQxTcXu%2FwrO7cwj6489sb6zx6KIGrxYHo3K73ZOnEGNBhy9L%2FQhjv8q9ilXHNSaPUzT8%3D\"}]}\r\ncf-ray: 9cd7376a5a2709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"228fbf4a9ff27aae2ce0c71b7cb71ca4","sha1":"73e6c3249b5c04e36d45c303667adc096443d39b","sha256":"34364711736fdb7a1102c064cf33a618c556d83c2361b06b4df1d214ff10c109","sha512":"5dbe7854729f44233d486e5d7eabcd1beb556feeda537c7c74ac394497a6fcf1577fa2cd8f4298462b6a10a3dda081fc07583f70d25f91d9d2b1e1dfb0a36074","ssdeep":"1536:mkcDwFijRV1pOak4axZPh1HEmEMoejTUGwL3vaaCs0uhWhkS22YgKID:/cl1pOVRxZPh1HEmEMoejTUGo3vne","tlshash":"1fa32a94719333670b8fa2c5586512489e7aea64404c581ff6acade38891d8e73fff70","first_seen":"2026-02-12T20:36:03.583419Z","last_seen":"2026-04-09T01:34:11.866046Z","times_seen":41,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 13 Feb 2026 21:41:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d298Lc20D%2F8B8v6r1Dk0kVkIE3mcVrIfnqCCMX5PFxu4P3FIl9EyU0ayCI3HkheMSHhoFn6jp0pDPQEps5YrQ%2FDwF%2FzAP0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncf-ray: 9cd7376afa4109b4-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T13:11:47.786184Z","times_seen":363075,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/089a35f5b2da00fa.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/089a35f5b2da00fa.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"6a30-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3cWmMAFLvbrZpVoz4yTiB8KaQKbFiwu6ctUo2YyUWp4%2FF%2F4TuDU30FMJfBTsglLL9AKLiAlsNg5qg7AkKX9ZGZlMtoEZxI%3D\"}]}\r\ncf-ray: 9cd7376a5a2409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27184,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26843)","md5":"6d978075109e93698c876cf7815da41d","sha1":"d6e1cb586162dad8d4f50e8c31f20b26cda650e3","sha256":"f8c791cb559e3b1002eae650ad1185a065fff31feb4cc9424e5eb24c6d7c833a","sha512":"46c0122ebf82f4730618a0ea7796f6715ba7ea716d0942cff13a63d1d06c080162e16a52cfc22d2305295fc179f07495a2baa75f41316104ea8392d511a780e9","ssdeep":"384:FyeNIscbzoieVdDEAjyqGzXkN9IsjbOzx4BWJUx:FyIdwDk3pbax5a","tlshash":"d6c2e8a5b582f4a0abc340ed407f4509b1366d1800adf470f2e5d4e672fe989a1b7bb7","first_seen":"2026-02-01T14:00:57.576054Z","last_seen":"2026-02-27T13:26:05.384339Z","times_seen":81,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/5c2dfa3698d55f88.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/5c2dfa3698d55f88.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"6d2c-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFOXE9vmstH49aIH9RJfHnQ%2BdPVnOIL9W2Jc8h%2FdGaAX9ZZbll82G433Xr6uUx3b0zf16Gc2LcY5LMpFIu6PTb3Asq7TXUE%3D\"}]}\r\ncf-ray: 9cd7376a6a2e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27946), with no line terminators","md5":"c312afd971809bc3db9e5eaf65868390","sha1":"cdd82208f11ed1d19aaa2bf28cc1e4d0a8c1f34a","sha256":"66f9a1dd8a15357102bd6b4f4a566df16ab15216f7b3c35bc7c9078a59ed512b","sha512":"4e803ee0523cbd43eaf547b43af59622b2b328be96152cc63e968812ad2f9307840e856048a5f5080594c2b3ba39c31b3b842480a2b1c0e5be81744bf6afebed","ssdeep":"384:bbga4IZDHYamPknd8llyLzJFtQUVA/z8oWDmuRHlZ:j4IZDHzO0LzZtAwXZlZ","tlshash":"11c2b6b27395fdb212db81d9c03a1005f2650c3521ae24b0b395ccef769dcd992b6fa9","first_seen":"2026-01-13T13:58:34.388892Z","last_seen":"2026-05-28T13:56:00.738588Z","times_seen":226,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fvolleyball.png\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fvolleyball.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9504\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: oJjnzoedeAqH1PphF1SoU5bu9R4oolVOszc8w1dZxEY\r\ncontent-disposition: attachment; filename=\"volleyball.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3tZm%2BS%2BubO%2BL8yiyofQl0w8XOg20NsLNi7ahqIepphxZ0wbBe%2BA%2BJEGdbqcRXLAZcP0oVv2iuTLv7pr6yggR1IHkfk8RAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737712a7009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9504,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4519ead58daaa72f1bdfe43c592bdb24","sha1":"53b225052b8fe2e348c5babfcb73964c37a2897f","sha256":"a098e7ce879d780a87d4fa611754a85396eef51e28a2554eb3373cc35759c446","sha512":"80434afb76e489b78a74c07690a4d842793e80a16f0c8cdf13ba8b81c128fce48e531527bb349bceae726a25c40545e902433c270445c202f89bcf045c51183b","ssdeep":"192:rGDxowkunCrRl+FcNqzBWJwIIZn8xpqtW/Gsio0n0Hc035ZLs79Q2inMebt6jn7a:r8ohAm+FcNqzgCIIOLqtWuz0LpZLW22y","tlshash":"c612af810f50590bfb540abd5a1a46373201a1f1a797c9ff23427e70b6ffea680d6c62","first_seen":"2026-01-13T13:58:34.470344Z","last_seen":"2026-05-28T13:56:00.620387Z","times_seen":209,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/profile/geo","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/profile/geo HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yzmMcoSphbo4sTk1FB%2FHoU9jPIrTKiq5Ovk3ZNOkWCq43j5duk9N9pVqMIi%2F%2F87tise7xp4pIkxU8%2F6t6aimMArhsfAqAE%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377deb2109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"542122b04fda568516d89e55d6c36120","sha1":"6e28c2bcce9430899f90cd4cb8c54459918e2c0f","sha256":"d77a18a735b5cef136d19ac34ff02534a18bc96127e2d665d886ddbf47cdb323","sha512":"f2532b01e1668c855c3b0430338061bcf8adf13b67968335bf1abefe17f3ce3ffe3fecd97452de655a18aa1de27103f84f84db53b332b7e05d0fe5f5f895d3d1","ssdeep":"","tlshash":"6b60000000000c0c00c000c003c0030300033c33f333300cc0f0000030ff0000000000","first_seen":"2025-04-23T11:56:57.670009Z","last_seen":"2026-06-03T04:21:29.39859Z","times_seen":241,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/betAnyTime1xLayout.bd3e4f43.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/betAnyTime1xLayout.bd3e4f43.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 312278\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"4c3d6-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YUG3%2FFKSf6m8LiYqqAuwOv81WkGZvcYehCaM9rzVNP0sJiypPz7ENK7WSVvD%2FbPZ%2FxpPFQ%2BqlnX7B0dS4sI1%2Fyzl%2FsXSEc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 399, 8-bit/color RGBA, non-interlaced","md5":"ee3c52b14d3e15300e4abf2c6f714e32","sha1":"ca2662321d541572782604f872e10f6c386c563a","sha256":"e87885ff2d7fe8d01df2bb44f5f3a3bb36603c692a7fb124a3e1aa0fa5b91d22","sha512":"c723a9a2d1535a8bb033947773baa69891ba736a3e9374232ebbbb235d48a662239ec3c4d6697cd1a98002b14c4fbc2088ec5575b5f14468ea5d7c6655cc2739","ssdeep":"6144:zcclSzoQLReM7xULewdqughaT5VpS7ERhePxHHbPsPzRqnWIHqhnF:RlOLRlUL8uFT5Df3ePRsVqnqF","tlshash":"ee642360be48cd5a6f90a64fe1331d654a234124dda054a30f16fad13cbfad9cea7f18","first_seen":"2026-01-13T13:58:34.402486Z","last_seen":"2026-03-05T13:40:52.670816Z","times_seen":196,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/8b183fe50f6749d0.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/8b183fe50f6749d0.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"10e6b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6JxifVAlnTMSFkM2Rrp37PzpfvGSJORiMGc4IiVHMpdwohHk2ow1QkNCPGuvRk3WVqMmxbilsOlfZaBdr%2ByXALCsHNEIJs%3D\"}]}\r\ncf-ray: 9cd7376a5a2609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48348)","md5":"83f5431f5839f9bedaa24365dc37eb03","sha1":"05c99acb68079fde5518ad436d27bbd377a164f6","sha256":"86b95a85e7f847a3f74cc10dea39c0d71b7310279794444b2bf95d322c1dc0fd","sha512":"1db01b787f1c5c095c3dc8c211ff635f4dd70aeb4e6f4105541868734f4264a7ed772e21b0607b3a305c2fdd378f997639a52feb2f0715cf9e174c25802c8bb6","ssdeep":"1536:DQm8KN44hUdGv/I7w2dXeaYYnPIL+up6sN:UENOuA75uzc4","tlshash":"e76319d97282f060639350ad803f8507b1366c29140dbd55f2aed8e46e75d9ab07bf3b","first_seen":"2026-01-24T14:43:36.95323Z","last_seen":"2026-02-27T13:26:05.35299Z","times_seen":193,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0e93f2801bad829e.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/0e93f2801bad829e.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"12381-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suAl4HZKC6CKjK3OZL2gPflYD9L9PnoC6vXuTjYeCAplCoEmHuqpV1k21LfzdQDFPW1AIsaozvDtcVGSI0CP7cDkUhKOjRU%3D\"}]}\r\ncf-ray: 9cd7376a6a2f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74625,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24324)","md5":"c54dabff4678ef2fde36fd9eddecad41","sha1":"5a7fd5e8ea6d02cca31640dd80b564c17e756206","sha256":"a182da4b9510af9003627008019e781caf0dd55e01e11eaff95444dd7cb30ae4","sha512":"22cb020467cfd91a0c30576d6dbd35e4dd02898093d71e54ab7f7066465909d8511f30d4d3a8108e3d2a14c7fc6c64c406386ae34e8d28a2b3e6fa8f676845e4","ssdeep":"1536:4Qe9fxkVtS4sMFKudBi6WjvnvlaqZfgVO9nDfXv:Q2BiVrnvl3DH","tlshash":"36731b7461646ef4b61f41b8f06ec54c341e7eacde6a9a54f3b87c265a048c03e96f83","first_seen":"2026-02-12T20:36:03.64216Z","last_seen":"2026-02-23T15:31:45.774837Z","times_seen":21,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3ac6af060d8f1875.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3ac6af060d8f1875.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"129-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QYD58qV1bhsLTr7nLvuSySyBHPf5qMr9Z0oj2DHNGcuVo5Qn8o7eQzXhY3obWR7yPVPo162SaMKQz%2BocS0VNSWkndeGR40%3D\"}]}\r\ncf-ray: 9cd7377bab0a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"28f8e2b2cf927da287390f7329f7dd4d","sha1":"2ae344339647c5cc33c06beff790a01b60b2d4a9","sha256":"ce46eaa429de0321592363232270431494bfc2661b2bc89f9d10f85f5c596bbf","sha512":"dd71baac3e3f8c119f3025b5da9d13a3fa4de5abba955fb33f32d58cddc0581d50e189f7c660a73885a0d4b5bc64d1acd4f82803c6ebc4016dec5795b29ab1b0","ssdeep":"","tlshash":"29e0c265c459f58820843688687186ee3a192025d5dc245bcaea0bb4a2f5a78808c26c","first_seen":"2026-01-13T13:58:34.523199Z","last_seen":"2026-04-09T01:34:11.900623Z","times_seen":212,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/s3/casinoicon/vs20sugarrush.webp","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /s3/casinoicon/vs20sugarrush.webp HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 225256\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"f1e286615a1298fed8c67ffbb7a062fd\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B08C2C2BE7\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17014\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekGQFhuMfAtWG2j3Uvth70UJiXeZaFmeg%2BUo6zYyHykuaFY7DUXJkQwYs7ouqou5NFtnj3EZGyCSJX0CZiA0sjpJrDABJi0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377f6b3e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225256,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 360 x 472, 8-bit/color RGB, non-interlaced","md5":"f1e286615a1298fed8c67ffbb7a062fd","sha1":"6d101d982cc98fab857c1e865edaa0deadad422a","sha256":"89798d3dedbedf88f7c77bc34e8f649bbc9af94baa31ff893654d9450756e49d","sha512":"bc650fbd189a96f0ec8eaf892e0b2d36e4e9b3d34a2302b2eea30ebd8c5de179a62434607c84951870718c67d54bb6dec43594bf444c23b183627ca687db34aa","ssdeep":"6144:ClVeX67QHxSVJXJ9bCLm7Db2klkC2pLimOj4jIjrsT/kB:bK0RSrbCC7DbepLO0FT+","tlshash":"fd24234d2f7a4eade580b43a0f3e6eebae30d5c69036126656f501bc055b6f0911dc2f","first_seen":"2026-02-12T20:36:03.510033Z","last_seen":"2026-02-14T14:49:07.586838Z","times_seen":14,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/profile?_rsc=1r34m","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /profile?_rsc=1r34m HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmGmEvxAfQb35Kv6quQVYB4UQYr4Gw2tOH3UTibnuhrgdbhGkdRvm323%2BlBxeGJnaj1WXqXAArqgVBLhmzpdp0P9vV%2F6FdU%3D\"}]}\r\ncf-ray: 9cd73778dab709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"0b9a8ea26f883118470ab45d385fab4d","sha1":"d69b6b71f4ce1a66c7375173955a94eff83b488f","sha256":"cc4567ad2f62a4b7de6e817a29668b71a18da66ddb92076caa8342b95f1bd9fd","sha512":"8def934938c160fd429318d88c5f9057c9b0a895807678fd3c72e36d559481efb6a88ce1ade9a6ee35df63333d6c304e43bea7aadc7df4caf1ce86f8c71cbf77","ssdeep":"","tlshash":"c9e042235d4e15b31abf20f1852d9a062985cd3b339955f0c0511d2f3f7632a93cf685","first_seen":"2026-02-12T20:36:03.58846Z","last_seen":"2026-04-09T01:34:11.880233Z","times_seen":40,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/0724a67b1049c331.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/0724a67b1049c331.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A87mQmhHdgOFHqHgZeQC329IDeVGFrf3K6xzdkEQDa%2FFLUR9HgEeP4TyAjbvyILRVevJA8GzpCXrfuCE9FE6IdwsFARmiiE%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"c0-19c583204d8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377bcb1309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d8ed1e5a4e1eeb82187df4f73f81b67a","sha1":"3e4c31819d546cbbfcaa68995b6de6bfbe7f882d","sha256":"8f370376066d4038065c26c3324ce7b7ef3fcedb5a296e43c444185dcf797731","sha512":"3a23c32b5efcd69f34ecab6a1801b5aa5b0813dbad556605f4ada6526432bcdbb08b313a206439f7fd52daf012671bfaa844803d1ac04cc930481f06f873320a","ssdeep":"","tlshash":"50c022286885e03a0188a4c8f0620614b84c38a8a64c540e903f88788061b18104008a","first_seen":"2026-01-13T13:58:34.472217Z","last_seen":"2026-05-28T13:56:00.765298Z","times_seen":226,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/domain/settings","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxo3USwL7le6t%2BrPn8GOE%2BGvV9flopTK9tR6UOpxsVJKC9ta7Lkw5yzO4z3LbmjFIZOkfNIZRDVs6DrhK53hRT%2FS1gcI5Jw%3D\"}]}\r\ncf-ray: 9cd7377deb2909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2f4c8d1ce45828ffe0f6991222870e3","sha1":"f174811990dd662ae70f9e3ba4272f93c5d6910d","sha256":"41c643e6582c7427f070c096e165928c3522e07fbfbd96bdab061a3fed93e17e","sha512":"e3570a5b6d1151540bfc4650f16097d32f293641fbd78b4787111e1ba68101e0244eb3b57bb054d300058d5ef5bc5327b599be3ca3973e9f5096e7a042aae798","ssdeep":"","tlshash":"2211292e441439bd85d9d52acb1d3c07477ed67772321d28a79cce3416e70b11628527","first_seen":"2026-02-13T20:54:22.037598Z","last_seen":"2026-02-13T20:54:22.037598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/oficcialyMob3x.30a4a266.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/oficcialyMob3x.30a4a266.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 552963\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"87003-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrPjzT%2B6U%2Bb7IsfBaiR71UGS%2BuRb4N0%2BZPIoA12I0ZdYU7X5oAExam995qF4ZlpwQcKemFcIFQ7kQLn2%2B8g2W4X22uIibZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a0d09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 966 x 750, 8-bit/color RGBA, non-interlaced","md5":"763321f0f207f2d31d1d20e152d0c98b","sha1":"22e7e6e0e170bd463e243d87f70e9b8fdef76aa4","sha256":"e25176a7680079a2c8d2d9043d2045779ad7c4317d27520531641903e077afd2","sha512":"8b695ac09be23f935ab53f4b78c2ee47af7fe69d0dea9f79853f9317b723fffeafd36827d27b393dfee441d7f7c700d836b070885eea924c975f936d36b7e410","ssdeep":"12288:x3bQgMncchsmJQIYjcPCND8lQu/Zm9uYzt0ys3DqL4G4lN2zJV:xLQgMcchjpYjcC8lQuawWlIm","tlshash":"e4c4232ae33035d22466976794f0324d7d7f626283cac45f886cd966137be46b0c2f6e","first_seen":"2026-01-13T13:58:34.524885Z","last_seen":"2026-03-05T13:40:52.70415Z","times_seen":196,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/profile/notifications","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/profile/notifications HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44Fnhv2UdEdi11QoyGKFvEOiq9pGlnS6uCaJeq99rRdSlLTzzZvd4fTbRo33tuDoVGI4dPPIPcoVE6cyHOgky%2F8oPsucGz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377deb2409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-07T06:35:17.085547Z","times_seen":16009,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/domain/settings","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APN4k%2FjR1yO5iFuKuJFukh%2F%2FisJEj45eXQvLUuo63a1qU3N72xjkLFEXzgmo0M%2BQCqupfB0ikW14W%2BVNTYSfVOObcJL7IQw%3D\"}]}\r\ncf-ray: 9cd7377dfb2c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2f4c8d1ce45828ffe0f6991222870e3","sha1":"f174811990dd662ae70f9e3ba4272f93c5d6910d","sha256":"41c643e6582c7427f070c096e165928c3522e07fbfbd96bdab061a3fed93e17e","sha512":"e3570a5b6d1151540bfc4650f16097d32f293641fbd78b4787111e1ba68101e0244eb3b57bb054d300058d5ef5bc5327b599be3ca3973e9f5096e7a042aae798","ssdeep":"","tlshash":"2211292e441439bd85d9d52acb1d3c07477ed67772321d28a79cce3416e70b11628527","first_seen":"2026-02-13T20:54:22.037598Z","last_seen":"2026-02-13T20:54:22.037598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/14d0b6b938188579.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/14d0b6b938188579.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"38675b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdHQtX5AlJVU2kYevSzeBFC6fG0%2FtJCS4uBYspQPsse7YiMchUUP%2Bk5RZO%2FyEZWYBu5lDANRNb%2BDgmGB1WZiItTbCpgf64E%3D\"}]}\r\ncf-ray: 9cd7376a5a2809b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3696475,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"515211701ee81ce2ce33b37a7ab6d285","sha1":"cdf692c8bdfbb487ca3c0b232bf32ef271f2e3d1","sha256":"df10c6e9d571c0fce19fcd0f38ab6b65bab99a94be182fd395019ae765e1a455","sha512":"e8f31935e8edf02d7a693434e9ff2d08957b301dc05d03ccab06d5fe9fcdf231fb7380cfdb3a7d7181648dd81f3c302a96259555e3974cdbe1ecb8b8bc19be52","ssdeep":"24576:mKX1EFvFoa99SnQo+a7yJ35K5SX3/KbrrPcvIHBr99v:gxe+YrP/F","tlshash":"272502f59fc9afe0a70ec7a4d0ee24c82c7e2ffb6a5946c8d3d51c5161150c868c9e82","first_seen":"2026-02-12T20:36:03.630956Z","last_seen":"2026-04-09T01:34:11.923062Z","times_seen":41,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":551,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/32e9bbe48d19ee5a.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/32e9bbe48d19ee5a.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"a4bc1-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQw6F%2Fi4bK5ehsnlM4MpUU9NIHQs1V3wHqR4HCFrzkrppNS5qlS1saC4tBrB0ANYO6rFWSl8PK7odYfL6YwMhT6Rk26ZcS4%3D\"}]}\r\ncf-ray: 9cd7376a6a3109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674753,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54689edd9dfe6b8710a3cae385818081","sha1":"3d200e7d77537c36f1d3b26b972b94dd3e655c39","sha256":"1becb04d1ca44d058451cfed76e00c7a6e50936b5babd712c9fd3ebb94b78996","sha512":"33f7299897ac772ff8297b840836ddd7f9b9f2261d8098b358739737feda95ffe41affde5e4b84e6c532841cbe64ac1685fefa20173b87bf6ce434643d111455","ssdeep":"12288:oJ3yJkto8gLBoJn06HCzgZf92vvc2R85q+O:aIk5yBoHmAf92ncH5qz","tlshash":"47e423263fc5153eeea846bcf19e0e942b2c5a2c5454eb3510c22db05a9f940f63fe5e","first_seen":"2026-01-24T19:44:03.151704Z","last_seen":"2026-04-09T01:34:11.954673Z","times_seen":206,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/fonts/proxima-nova-bold.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /fonts/proxima-nova-bold.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/_next/static/chunks/20a8f5afeec60e83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40673\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"9ee1-19b2715ae78\"\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBpUF4%2Fzvw9HGAuuYePS7YXLaD3WYADH%2F%2BobpyxRyAm3PkacqslOzSNbH3Ks7TvUCB2WRdxk5SLCS02HgKPEu1%2F8znrwudw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376d8a5209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40673,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40673, version 2.983","md5":"48d3c107c13fa987d3eb7906b45cccca","sha1":"68b87a7a1ba49a25d26fe8f5237ece603328ea0a","sha256":"acac712a6b1f8ab9774a10619ffd2904cb439cac895b8e5decbac3ae98961e60","sha512":"18aa93e7832f585c5a29cb9d3daccca06c04b11209701a8628f7743cecb4276aa2ed2a994f402e578dea8a055677cb03457e7f54bcd66ff8d980d366f4edf31d","ssdeep":"768:AWKpi51ZjpMb3g+p7iAEkbkrFDKG2xDkpI/AHVYnk/phcAI2n/+ClYL:Ypo7aBiAQrML9KwA3pu3YBKL","tlshash":"f303f1c98fa1a299cb822a6edc5b575d735902c5c9a0f3f0831b0194b5b5073fca1dba","first_seen":"2026-01-13T13:58:34.521269Z","last_seen":"2026-04-14T09:41:52.519738Z","times_seen":215,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":36,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/44a49465387680bf.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/44a49465387680bf.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"2639-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGS6S7gFY5n2pVGoXXMxGhLApba%2BTB%2F2ygOezQOeOnJlExIL6y5Xq9XOMnhDpUyk0JXGlrxzwrRWjltLNrGLz8W97EV2lnw%3D\"}]}\r\ncf-ray: 9cd737744a9209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (9733), with no line terminators","md5":"4b31a3c83f986a04ad80c7618ed0f42d","sha1":"cb43d9dd4b664637f8e7d34f8db097765fe2fe25","sha256":"c0aaea4c727db1b4550ab636e2b695863eabb46f341593d3bda8fa723dc2902b","sha512":"999432ead19eb74fbc858cb8cb94498335e2f8c63051182d005c501242c92b174adc660e07c6ceb9f8680781d82ebd9d8424802504e087d4aa30b39e0727ccc1","ssdeep":"192:zvnaPno9CUmhVMgDYKWyqrmAs5ZvZjkVDaXgm0WBFpoNv:zPACCUAMfrmAGj5NBFU","tlshash":"5412a50b471932790ac602857e9723f2773d684d72f5d1a09c8e461c23da67aa93ffd4","first_seen":"2026-02-01T14:00:57.558496Z","last_seen":"2026-04-09T01:34:11.861683Z","times_seen":98,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/2d3894a523d29c3c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/2d3894a523d29c3c.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1d5-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xF8F0kDodELUyrqDwXFvzY2kmY7JAoQL%2Bd0VjyKYCQY5UljBAFIdcpxL4Z01QYeFQ%2Bzi9hlWLyEmKxgxh2pKgdGOoqs1JAI%3D\"}]}\r\ncf-ray: 9cd7377afadd09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (469), with no line terminators","md5":"890051a2f5ba194f62e0a2247ed852fd","sha1":"90c5c10ea2a46d80ed2cb963e88fc201d9f0bd3e","sha256":"28e065269e96e9d4ef1367a70be5a2cd4327b1a12a611101ace84bd22f90217c","sha512":"081ee2edc9cfc6d88a02cbf810aa184cb5cd4dd59afcd654b638dfbedce9929c4635c3bcb82096521cb3100001f18879c32c90dc16a42c6646fd202e80293492","ssdeep":"","tlshash":"49f0dc6a5e11bba82853006cf82e6394b2382038d32c5508c49ec5b0a179b2bb22a198","first_seen":"2026-01-13T13:58:34.419989Z","last_seen":"2026-04-09T01:34:11.943399Z","times_seen":212,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/fca43ff19ca84387.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/fca43ff19ca84387.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"3a9-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F05Ox996%2BNpiREGnAym4GvB2GafqmzaeA%2BiE47KlwiG9UAJHWxOUokgHovnuoWiAvm2jAIZedxlu6N0eK8DH1Jfaza8qYPw%3D\"}]}\r\ncf-ray: 9cd7377afae009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":937,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (937), with no line terminators","md5":"855a8aaa259c9f21a6b02af8cb97a58c","sha1":"aa42585d7e5a72a628c335b8f51c1847392b28a9","sha256":"284d8ae72633a59ea67dfc7e98f008a06839799d1b63caa791bb8fbda1d6c5f2","sha512":"bd5f4cfb8debef8aadbeb4a3a03806d893c7f49edcdfee31036e53832d5d169707c52d955558889ebc1d82288795d6b91e613ed186f60f70ce4f0f2e525ac70c","ssdeep":"","tlshash":"7b111c840ea4b47c2557120878f36781b07c0666e19a708e8ccf475cc2f9b38992f3b0","first_seen":"2026-02-01T14:00:57.583606Z","last_seen":"2026-04-09T01:34:11.950215Z","times_seen":98,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ede46ed25a51b417.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/ede46ed25a51b417.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"90e-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m66kYcxiITAlx5%2BWAbv4cRh0MLsDRBKG6cUFMRSw7nYWfvizAgVpUCQ5LcuAHx8lYrPxJfDgvwF9kEdYbOkaoHc3hUlifUU%3D\"}]}\r\ncf-ray: 9cd7377bab0c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2310), with no line terminators","md5":"5e5bb589cc16ca039001c07057fb28a4","sha1":"b5665dbca43c796f3868939e426cac74de709bb7","sha256":"27c2297ad708af95d246e037e0c5c910a07c70e3b59b9ebf2ac7255b99e158df","sha512":"01d2f9c51d846d37efe2b5582ffaeffb7517cae07fdf62b5c846170c9bd299c419b35621941f4a5389c031aed1770fc1eb24ff26f0d35243824655bafa8136b6","ssdeep":"","tlshash":"7941451e0e04fd9406562168adaade6c70a4421d90e2ec4caddd07e863ee35d453f73c","first_seen":"2026-02-13T20:54:22.138532Z","last_seen":"2026-04-09T01:34:11.936296Z","times_seen":35,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/s3/casinoicon/1309.webp","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /s3/casinoicon/1309.webp HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 191112\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"67de634afd975632ed55c97a46274d7f\"\r\nlast-modified: Sun, 01 Feb 2026 06:51:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B08C2A0ADB\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZCOUpWk1lVmUa1oRjmYVn7Zj3N2aAGJp%2BQwgDnw8C1PAfmmS8tFhT5FyHieFJe6%2BIxZrvbiz8UE%2BBeYxImrZhDKYM%2BjGDo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377f6b3f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191112,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 360 x 472, 8-bit/color RGB, non-interlaced","md5":"67de634afd975632ed55c97a46274d7f","sha1":"266f437d9a77778edf3648153208b5ab234d482a","sha256":"2dd2997203a4aed12599d29f3b7acec417219602caf5ccefac1e6412de958224","sha512":"39bc73e745ca4e806f46bb88fd497f0da2c6b409d7f5e5e09fbc132688afa610080ddcb1928509636b1feb3cce304a7b4a2b656ccde12c295e0d21fc889edbc1","ssdeep":"3072:DfXnSkyhQNXDwrkbAF8UqsuJj5CMvQ3HrtjpnwzQr4YQ3iNekbEG9iBwUB2:DfX/+QNXDwAbAAFQ3Hrt9wzQrciVn9iS","tlshash":"bf14239ed7c056511be03a4b00d69f49a0afa22465f81af1c9fd35dcf1242ff82a8728","first_seen":"2026-02-02T19:22:04.376431Z","last_seen":"2026-02-14T14:49:07.549972Z","times_seen":23,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/03fbc1250bf4a7b6.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/03fbc1250bf4a7b6.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"131-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGqPQD%2FqyFnf5%2Fn06wUN5m2AcAQ5fMO9qKZGXQomV0%2FC0%2FZ4fHiwaL6QhMRHkfXoc2WA17mYrC2NcHo6KbDKjx5WuZEGfuM%3D\"}]}\r\ncf-ray: 9cd73779bac609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (305), with no line terminators","md5":"441f8c9d4b02e80a247aae360e3c00e5","sha1":"b9927e735deea0cefb878c0198ef58cfd561e589","sha256":"5509a68afac0dc2dc6e67611fcb9c06e539408c53a492b3afd0d9a4b9df5184c","sha512":"45bf68ebd3e1293fa540164ea17f88653a1b7bc2d20c3eb6acaf23f9948090c643984ebd69f7d428529900a4d75f746cc22ab344613d101cf25b28e7076beca6","ssdeep":"","tlshash":"cfe07d9a100784e809c77369b275468830bc20e8643f8032507d846c52b626c9289440","first_seen":"2026-01-13T13:58:34.410052Z","last_seen":"2026-04-09T01:34:11.876408Z","times_seen":212,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/80c78cbd5d83aa60.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/80c78cbd5d83aa60.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1fa0e-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ci%2Ft7mk9e7zwhQyvrEDZMHa%2BmqNXz333P3j22%2BKu8lg%2F9KD4HW0n8K%2BMACPDIQeadGr4L2rmBzrRSpgzNbeQAHvgihlgaU%3D\"}]}\r\ncf-ray: 9cd7376a3a1409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129550,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"40e12e46a38173060cb2b5a60f6f58ab","sha1":"ba9eaf44b17d23ca2cf57e6c993b126dfb2f230c","sha256":"d962650ae6d78e4c38daf9d0dd76f28d8f8eee7b94c27b4e7cfb78110567e684","sha512":"1527eab4ce7f4f44f947eac7277721f1f17843f4313a45aa96f0cfc6dd4ec7dab25f48bd6cb93012dd4ca272e170808a50834846a0d097869a64f298e07d9736","ssdeep":"3072:UQZB56hAF7fkpRObf0R9LekLOZv8hrkegp2G4XhE6c3x2qpiOWMlxoMlparDOm08:5ZOhAF7fkpRObf0R9LekLOZv8hrkegpW","tlshash":"5cc396a15327953fbc2ba0f192b8bc8c712bb291ef2617d8fd51612267c1af41d36724","first_seen":"2026-02-13T13:23:25.276655Z","last_seen":"2026-02-14T11:59:15.471651Z","times_seen":9,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/domain/settings","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11cnHGLlJ%2B2OAFRQKxpcrMAe1w0KRChwV%2FD3aYBKtnaWDZBiD30%2FiCVGEpeQsieipft7Ef0jOrEKjbz3SFnYOD6LvjDCteU%3D\"}]}\r\ncf-ray: 9cd7377deb2609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2f4c8d1ce45828ffe0f6991222870e3","sha1":"f174811990dd662ae70f9e3ba4272f93c5d6910d","sha256":"41c643e6582c7427f070c096e165928c3522e07fbfbd96bdab061a3fed93e17e","sha512":"e3570a5b6d1151540bfc4650f16097d32f293641fbd78b4787111e1ba68101e0244eb3b57bb054d300058d5ef5bc5327b599be3ca3973e9f5096e7a042aae798","ssdeep":"","tlshash":"2211292e441439bd85d9d52acb1d3c07477ed67772321d28a79cce3416e70b11628527","first_seen":"2026-02-13T20:54:22.037598Z","last_seen":"2026-02-13T20:54:22.037598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/instantMob3x.99f48e40.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/instantMob3x.99f48e40.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 404364\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"62b8c-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TClIpsA2F86wCBsIdOZ9o3Bg1c%2BByWfaPJYNtUGVdXNLuohJfkreFzYJMfoQm8o4%2FIGoe2AkkV6dQtlH7hPCWcn8AZS6JQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a0a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 966 x 750, 8-bit/color RGBA, non-interlaced","md5":"80b9245452b59d9a3d632f23ee4cee13","sha1":"8d962df7fb3bccf5d742aa87101dc45374f6d214","sha256":"7c8b5b2eb473a7a05ba3015107dcbffedb2e86e7116292282cbda39e16d58931","sha512":"a789bbeeabcef6c28c8e1239c793741f26b2251d3c722c12702c0812bfdd9128842e8f858eacdb4c25102cb5a45e795496783c545df478d14195ad069240279f","ssdeep":"12288:Wa7+eNLHixH4rdj9kG0fVYU1NmSAU0ysQ:3aaDixHiufLmHUfP","tlshash":"b38423c663374a639bf409e1f3c667a89779d866eda5c11a29fdc0c1b08df60920cc76","first_seen":"2026-01-13T13:58:34.474821Z","last_seen":"2026-03-05T13:40:52.653907Z","times_seen":196,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b459c96aece42f76.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/b459c96aece42f76.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"cea2-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83S3%2F%2BG21yYrBjtTnbXhDVqKDoThGP0B41Qd986hXdzjMyfGWJTp5mHxrU0NKHHLfSUp79h%2Bec67AptjrLV9K5ZNuP8vCSI%3D\"}]}\r\ncf-ray: 9cd7376a6a2b09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52898,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46724)","md5":"95e4f17dcbacd240532f3b071dbb3c0c","sha1":"8aaa788f29220d2a1e6d615dfd9351ac68319782","sha256":"cebe0294cec954aea28941fbf2b31efd57393f1786f674ae7b3401df70083303","sha512":"25591bb477338a3029b0485fd0c1a3a97cb1af63d76c741c3a4c1a790b0b39de58814ce1635f42bc47c94b9547ce3ad1ccd611272bcd7c83ac6031d2d71094ae","ssdeep":"1536:HQ6bnnxhIb/kOQuXy6rOLh96u8r0x5OnwI1C5:1bnxhIwO7yNhbhH5","tlshash":"c633c75061556aacf65b4195b56fd00cb02ebeacce0bc418b7bc3c792a048c4bad6fd7","first_seen":"2026-02-13T20:54:22.14589Z","last_seen":"2026-02-14T11:59:15.559743Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/src/assets/fonts/Inter_18pt-Bold.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Bold.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pT7Z5HyEbEPe%2B4h6c7yGVtCc9uar7jxUiPYKFO%2B0kFHDRVB0uA%2BIzSB%2FCHN%2FU83RHGNscolV62AC2FKPLc2vSkYsv1aYybI%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a6a3509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38616,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23722)","md5":"ff86c903d03e02b24bee35f0d4b2bb88","sha1":"c10c64e907ac1d5c54a35a7d1ac8ff2ac7487be4","sha256":"0b5bbffb7611a82ea0abd6172047e5dc143cf872b6042e29335e99b70e8fe274","sha512":"e27daa91ef4ae70b9ea2bb5534035f9e7f088785dac842f13764b2b914c092e3d55c95e59a801d086c6a4bfdca08e32a62bebcefc44ddfc80c5afcc888adfb05","ssdeep":"768:0TyCq1SOkliFlBCRVMbhSSeQjVWU/JvPW:JlBgVMS1","tlshash":"52039717a807c90a996aed1813ff2f2d00cca5374961dc39f7aeca4d0b8157e47e6e85","first_seen":"2026-02-13T20:54:22.070865Z","last_seen":"2026-02-13T20:54:22.070865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/coinflip_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/coinflip_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 572492\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"637822b459d90e17a9ea6d63aaa1ffd8\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B093A65420\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ox6XDv6DBZkdmElRXC3SjZV5pKSJr1VGE3ZIuObFlmCNqEXuC1z8HigIFP1tLAbY1nDFBSj9q8a2m8efkcSx9ANWuCNoI8AcW6PxeuwH2Ew%3D\"}]}\r\ncf-ray: 9cd737800ddf0a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"637822b459d90e17a9ea6d63aaa1ffd8","sha1":"77900dabf58b4450e3baf7f8ca2a864449decf7b","sha256":"2f3f40a06d5f5a946f6e56af2f468617fbe8a79074913793121a97c89e82f94e","sha512":"976fb5c72d4e58599969ead980d2ed9c668996dfd058bbfa222df2655a3ccc0a43036c5b2e6bcd6651c458d1b205ef434962ee5083983ee0eb017a117448e136","ssdeep":"12288:WJDrlUvTqkNiVdKgy1qS2ESgAbK5JUNO6y2JsdwFcjG1HEKcVtV9LfNjRSsNmvMb:AJUvmk4K7q8SgCK5SNO6ycewa0cVtLf3","tlshash":"52c42366f67050e44b5abe2f047396536213190e0136f62a3b492ca171ccfed7d7b89b","first_seen":"2026-02-12T20:36:03.622497Z","last_seen":"2026-04-28T18:07:01.618308Z","times_seen":36,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":67,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/5444bdd1078b01a3.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/5444bdd1078b01a3.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"da3a-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PIfM4QhF8CgUfHC%2FGRVAZCTLqrM0nv%2BnfaeSx%2Flr0OwxbmRdrqsKj95JmA66kYN75YWbBd%2BheA3ES9%2FAfb0E2S9vkWVG%2B58%3D\"}]}\r\ncf-ray: 9cd7376a6a2c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55866,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49470)","md5":"0844f516c91b9e393dd432fd46204f8b","sha1":"3fd137ee747eb68c9ac6df02c7230df97293d55b","sha256":"08dfad27c27f5736af4cec1f4401e67cc57b8cbf377b982474dc2983659d6234","sha512":"57ad1e68bd3cd1c0afb76756be16fa0cc72f1f7e741a1be903fe3eb0cba6b62a500b6c88c24e82096a0fc02b18540bb958e69076b0173a5032b36a0b01ef3b6a","ssdeep":"1536:EU86G0tBW2/YezpEQ54l4jnYPfRy9rgd+:E0G07WUXLVjz","tlshash":"cf433af533657034875781d6903b420ab33a2565a40a482cf7789cfe39b4a8672b7fb7","first_seen":"2026-02-13T13:23:25.227831Z","last_seen":"2026-02-27T13:26:05.354115Z","times_seen":18,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/profile?_rsc=p37cr","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /profile?_rsc=p37cr HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIQuLuAJO%2FfIgFH9uKikRlp%2FzivV9K%2FzyDace%2Bxc6o8ziYILUP%2BnP3gGNWEaf5NncMvhPFHi3fFt8yS2cQYugE%2Bk9FdxwnY%3D\"}]}\r\ncf-ray: 9cd73779dad009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2930,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2010)","md5":"0a3cda447f87ad34ade64ef7da7ed9b0","sha1":"f83aa060b75166558f108895b321740cdaf6155c","sha256":"82d91b0bd40528d708a3dd9e81f25e2ca21b01a5ddadb0aa83a5ee444757b5a4","sha512":"18d90ccb2df2c9cfa9dddbb2381f8a1e0e0d911fedd31f08199534cfe0f8e62df74d4a9bacad0bd195f3519df475c44117f4ee0210fbb16423e8a66261a21f52","ssdeep":"","tlshash":"1f511e3f8601ed9e57d7466901ebb34a665c473b5310ac66c09e0d4c238a27f2f32ba1","first_seen":"2026-02-13T20:54:22.166876Z","last_seen":"2026-02-13T20:54:22.166876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/97a6f3ed35a1c469.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/97a6f3ed35a1c469.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"7f3-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qO2CgXMhRC5tNw12fVxrhcIikV9LrszliCJYJ2beekfYzsX62co4nuoReTu6dX7%2FGq7W78BBz%2B4BnZxJI%2BDJQxSl0SH51LE%3D\"}]}\r\ncf-ray: 9cd7377a6ad709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2035,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2019), with no line terminators","md5":"b7efcce7ffefb3b55e70c5de14600b04","sha1":"b056f927afc51decab632ca5d3f99f109e7b7031","sha256":"0e1e093766cb3bdb8388d65d9ca904ab9df9157691a3f647ffc8f29633968273","sha512":"094c76eb01962990a5ccf554e1ee38f0ef2925f93777f6e7ff2c4adb73f5dc38fbe6215ca587d406daed1885fe2cb1af099b6f8cfb9df703a7c6c939bf0644e8","ssdeep":"","tlshash":"9e41315a8a44f6a8038f1009fb77d61079b8030cd1e5e05d6dde0790a2fe3ba943e7a9","first_seen":"2026-02-01T14:00:57.577467Z","last_seen":"2026-05-28T13:56:00.718218Z","times_seen":112,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/keno_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/keno_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 549278\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"c4c2acac3731e4553a58d09d1017d4e7\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B0940E8793\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17014\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpGE1%2FYa9O6MLd9mCFDxx60TfgOrkl7ZkjTcaYPRMsNQ%2BVNQQDsvW3vsBZKBFzv3ekQq4R%2BUAt5fYs%2FHLlUsDftvj7stAAonuTaxHNGgxpw%3D\"}]}\r\ncf-ray: 9cd737802df50a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"c4c2acac3731e4553a58d09d1017d4e7","sha1":"c46eb7f7cdf2193c19168f9690ae8fdb93fcec97","sha256":"0dc462105b22d479cd304a011d65e16f54633f045357ec0b382bfc233c27a469","sha512":"fcb0d66222980a34ee140a4bfdb1e49b04bb9f38f72cf3b8e4d1389b722a654acec296d71f8b8ca13dc2f25cc8ab50b416aac846f721d5dfb352e0ced27f7326","ssdeep":"12288:wpAJKohPTvZvTXJEmM7r5pW3hdPV1az5pARzY4txYDRVMc2f:2vovZL5Zg3e9V1az5pmsVMh","tlshash":"26c4237782635b4f9e54f049eada9f297e527d4ce64204e89857ee4488cc0c37adce0a","first_seen":"2026-01-30T07:25:16.111153Z","last_seen":"2026-04-28T18:07:01.702129Z","times_seen":172,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":101,"dns":0,"connect":10,"send":0,"wait":59,"receive":199,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/86f9a5cc20b78f3a.css","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/86f9a5cc20b78f3a.css HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"81b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j57wQElSkQM3FukCwW9bQSEuJQ9Dd0JylIB%2BlkLDraUzQ8v6Xqz5kBZinFbSWdXCJldN9Fxi%2BgXIdGZhCwViTV7KWZgFo5c%3D\"}]}\r\ncf-ray: 9cd7376a3a1509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2075,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2074)","md5":"61eacda8d8be12e2e76eae6e51fb4d05","sha1":"079576f25319da4bf7db96305a5e126d495d4ded","sha256":"f8c8573362000665d743a16f17b782555ba72f4c461042a4f34e1e28cb627d07","sha512":"37ba7e725e847aa7f09da0cb79b3daa29cdd5d6e1adfc579ed964256e84d0864b9ba7bf8ffb87edb4d0865d3b2ba3f253afd24c575c611c82a33ef4158f09706","ssdeep":"","tlshash":"9741bd24511fa909c1e3dea335cd2e432c0e543056e667639c2e1e689eef53b13e1b68","first_seen":"2025-11-12T01:23:10.895082Z","last_seen":"2026-06-07T03:54:59.973651Z","times_seen":229,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fcricket.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fcricket.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9424\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: Cuuvp_x1QU8JV1qn9u2c6q87_xnEJ_JQlmgbMZEReos\r\ncontent-disposition: attachment; filename=\"cricket.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BobB%2FI5PBX%2BhcIr7GaK5P3nyVHbdblva4axDOm8HwHcoDM%2F5pVB9oKMUrPqO4%2F%2B552itqH3PZw3NICbI7sSYMBVlLTKoF8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737712a6d09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9424,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3eb5f159bebeb426efdda5d198ff636a","sha1":"b1945f31af55e950a8056b5adb643e77cd94eae2","sha256":"0aebafa7fc75414f09575aa7f6ed9ceaaf3bff19c427f25096681b3191117a8b","sha512":"d5a1370599deef89f3b29913e8934a343223753c5a9ff08a682a02200a83c00d9c3002a874df3458e41a2344fb7362251fe420fa8d3b7607ced7a057cb5a15bc","ssdeep":"192:rGCkcFp+5+mmnYfZ3v5viVlu5ZArOS95V87Tq6TqEX3MELugudHCJqTD89X4Lq0o:rxxmmnYfZ3v4lV95x6TqzFgudiJuc","tlshash":"4d12c0920b0dc620f31ac134e1575e5285fde6d02c8e4c567e09347cb53b3bb694d275","first_seen":"2026-01-13T13:58:34.434649Z","last_seen":"2026-05-28T13:56:00.696154Z","times_seen":209,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3462338d369f835d.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3462338d369f835d.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"22a-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDhBQYngi2s8S8ROTBB5teGsl99I%2FFob5nf8ZQrNoVjg6uvaIPR6zE0ODhIkdjcT%2BOPl5Vc5aqI%2FunbxlGFlENVlAsfofHs%3D\"}]}\r\ncf-ray: 9cd7377c7b1709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (554), with no line terminators","md5":"6e553e02e168916bc3cb32361065c02d","sha1":"987728d7b21c06dfa8923049b52aca587eeb141c","sha256":"ccd3fb2588cb35bdd6d179460c94c22df80aa3bbc12bcb026b7d4a3fa9a6ada9","sha512":"a289a53e2f36aff190ab1e5d40e4835b81b3d70e5e74bc858ba2d9922f18649ded88da9be77bedf1028a3d56b8f54d78a842f013c70a420b7fe746360b2a8fcb","ssdeep":"","tlshash":"8ef0c9ba8055484c74003b3990e0adc538f819b698facd12bd9e47e8b0bed14a5019ba","first_seen":"2026-01-13T13:58:34.392362Z","last_seen":"2026-05-28T13:56:00.776211Z","times_seen":226,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3bf9612b3348457c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3bf9612b3348457c.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvGKaxlhf%2BE8abr4XuC9wPants0LLuJJlsJZkG44QMfA0d5BojDbQRHPzlsl%2BTSFQl5CyDS6YR47FM%2BDJiNFNAJbCJLrCMc%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"f1-19c583204d8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377c7b1809b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"66b74967a779809565ee6bf2ee6b5b65","sha1":"f1089c9350d314e3802541ea297c22765ee890e5","sha256":"0ae3c7949f0b8568f400c953f0659ca5902499840c7029f0b1f904d83ebb4456","sha512":"49e8234f54190f060a2a7d0e239cfb34758d209d114623e9c90d391513e7cdcf9a302979affd6bb028154a80ddbe76967e8dd022ffeb7b959d0fc274dfe48223","ssdeep":"","tlshash":"0dd0a7596481dd3c1808529de662332a34a534b5618e2406d01eddb05274f5895405c9","first_seen":"2026-01-13T13:58:34.43815Z","last_seen":"2026-05-28T13:56:00.598157Z","times_seen":226,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/plinko_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/plinko_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 470297\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"aeea3b837bfafde6331b7daa35c12a66\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B093A7A80F\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17014\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2F93BZ9VM2D8IBYqmr6YoDyNeoYxVINyVsdEiLwwYenVkbObBqP4EQbqvUsUTzQAcLprH80MDIlDjynMUud1GHj3ERm656qSzlAWFDdKmFo%3D\"}]}\r\ncf-ray: 9cd737800ddd0a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"aeea3b837bfafde6331b7daa35c12a66","sha1":"0f8d0333c5b75610344a3e80b0eeee26742666b2","sha256":"0590e837cfbe9239c03319696575cb6f257a10ab12e851639e60b12a027bb804","sha512":"596dd9c57a0954579480751532b618181af9528a740b3ef45a98e9f7507908df5c6e7bfa7db79b929b5d431a970a7231ee78cc888219386c76b8eb30620305ae","ssdeep":"12288:HyWDSZM1h31k9Wpcvum+LZpqn8pO2p+aRxgwsQk6RCik:Hy9+1QscvrmjqnAO2pHewbk6RCik","tlshash":"5ba42356f89a881f93e7e4a9b128c01db37d195ba79d13331874ff7edb82569a01200f","first_seen":"2026-01-30T07:25:16.168354Z","last_seen":"2026-04-28T18:07:01.644651Z","times_seen":172,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":101,"dns":13,"connect":12,"send":0,"wait":66,"receive":150,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T20:53:39.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c./logo_megafon.svg\u003e; rel=preload; as=\"image\", \u003c/assets/landing/char_take_bonus.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/media/latesPromotion1xLayout.89ac0560.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/media/bettingWithoutLimits1xLayout.b6361f85.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/media/betAnyTime1xLayout.bd3e4f43.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/media/bestMob3x.70ac24fd.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/media/cryptoMob3x.6fc5db35.png\u003e; rel=preload; as=\"image\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdXYabI8ufbGjWz8Rgc1YXP4%2FeELJVsP6EOVOaUF3riFxI2gBXpMDGxgwnL0muVrdUSjYH7mZwhCZ%2BJNVv2gGTAvGZ7RDWg2TA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd737686951e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-h2-pushed: \u003c/assets/landing/char_take_bonus.png\u003e,\u003c/_next/static/media/latesPromotion1xLayout.89ac0560.png\u003e,\u003c/_next/static/media/bettingWithoutLimits1xLayout.b6361f85.png\u003e,\u003c/_next/static/media/betAnyTime1xLayout.bd3e4f43.png\u003e,\u003c/_next/static/media/bestMob3x.70ac24fd.png\u003e,\u003c/_next/static/media/cryptoMob3x.6fc5db35.png\u003e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":1660486,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16079)","md5":"7a292e8325f5efba5f57ea5a6a1a1224","sha1":"ccc98273a0dfcfc8b0df099115ee5b860bcedea4","sha256":"f4ba409d2dc721e294929aadb276a8672afcc229f08110ccf4565e160fe8d2aa","sha512":"10af456ea6ffd02d3697576dca3b6e4f20346be5b9ffb55b7c4056606dbb5254ebcfe71e2f65974d601ee4c747956ee89a37f14c363cf9c30f471acb887fbad9","ssdeep":"12288:Al3yJkto8gLBoJn06HCzgZf92vvc2R85qWjPDZt2KINQBtF73:IIk5yBoHmAf92ncH5qWvz2byTFj","tlshash":"2d25f1b05e4d2f6d731287ace2dd19e92d0d23efe511c99d72ce2ae4d79680c88e9c50","first_seen":"2026-02-13T20:54:22.20204Z","last_seen":"2026-02-14T11:59:15.566256Z","times_seen":7,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":99,"dns":64,"connect":10,"send":0,"wait":83,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/logo_megafon.svg","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /logo_megafon.svg HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"8079-19b2715ae78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZpBLXFMp715NM3K1lUGDJkw8syud%2ByAJ2Ubx7hYcC%2B0Yhbng%2BnvFXUdo1pkvu8fdgLzd1R88Es%2BAt00sJY3MoeanV8%2FEks%3D\"}]}\r\ncf-ray: 9cd7376a2a0309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32889,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a81bdb4780524728d86286225a1cc196","sha1":"f8cd9b95b03bd4b2642714168b6c74cbad2be240","sha256":"24a4d9a9a326d8fd33c63891a0685eb46672109b2f685e985c7fa199d041d9b6","sha512":"65273cc06a7beb5a86d07a081284a6caf27b34acbc5e7bfeeea98a6cb3bcc9348486ec8ac77e700f1b867aa1f8cf022d470897eb1890e6e51184b777d03e664a","ssdeep":"384:9Zdy1LOmzBU9naXuuNyBJ19hv7qVm+8aXx4cJZoIkFmpSM2vPdv9Cx5UsjYPs0Nw:rnmzBU9luNoJBMmspYeR2vVv9XaY7Tm","tlshash":"a7e2f1bd15ecdb9df6f46f11627a522cd430785b8241849ffa86eca0247d99f0422c8a","first_seen":"2026-01-13T13:58:34.427762Z","last_seen":"2026-05-28T13:56:00.649418Z","times_seen":225,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/assets/landing/char_take_bonus.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /assets/landing/char_take_bonus.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 69146\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Sun, 01 Feb 2026 02:04:17 GMT\r\netag: W/\"10e1a-19c16f194e8\"\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCpWsoGHdEGTGS1A44olGldCbbViO0AQGt7W8hsItQrXjFw4wnjkk5CLT73fw7AOIa4MTzX5qQMOlU4rYmTR7Q4m%2B09Vs1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 206, 8-bit/color RGBA, non-interlaced","md5":"41335330f4324519ca9d8a82c230ea17","sha1":"9c2ebc041f4b29696ce140d37d8ebfe9d4b34d3e","sha256":"7f3d6bb28fdc50504e573df3aca354d9560c7fdb07c90cfdebeeb76eec4a908d","sha512":"0ae8178fe6bd07b943ac5044219a1df2ac4b63a9550843da3b7bae8e7459cae4fccffb5f489e262ff4c664c60db2881f0809e163daab840098a1b08234c7fc84","ssdeep":"1536:eiyia/MWn+6Mll3fbeKJgcvGom+JeY3t2MlQH6F3+Rhx:BypMRvl3fbeKJgaVeAtfKH6F3Cf","tlshash":"1e6302b05d4e4b62443a0e16eb3bb44e479bdaee1c78b0dbe587c1c6b92ac7c1355407","first_seen":"2026-02-01T14:00:57.569136Z","last_seen":"2026-03-05T13:40:52.732061Z","times_seen":82,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/latesPromotion1xLayout.89ac0560.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/latesPromotion1xLayout.89ac0560.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 517146\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"7e41a-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GaPO8j84QkVlnlv2rf6PylhTQ3uBPtnYbzt%2F5EcmuRwto5YFVeaNfsyZa4ZqesS5CVB7kWHJ63Ix8aCQrq7HjK9fb3dB8M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 399, 8-bit/color RGBA, non-interlaced","md5":"af63ecf4a6b348fb56592a9bb3297780","sha1":"92881e9a39a5a1d19511bc4445cd49d126c42df9","sha256":"03243dbc561b4e6ab8f74f645d765cd7e0db13f186e08bbcdf71b4635629c423","sha512":"f593dbd5ab0e08a202f1d079387db94104f1639c6075fd18972b3ee0b6a84ec8d9b780cabd9bd97b820b6037af6839d9846641fcfe0d87c6e91d87f16e8d7988","ssdeep":"12288:EjbrRMT4r8IqWmgUzsXBDoK4UnJ5tdTZT1zJFWx6:QNJ6jz2+NUn7td9l66","tlshash":"7eb4235020860b5d057689624ef95fe93421f2e35d373cde4df40a265aa6fbc6cb06b2","first_seen":"2026-01-13T13:58:34.454394Z","last_seen":"2026-03-05T13:40:52.653006Z","times_seen":196,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/payoutsMob3x.64626f65.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/payoutsMob3x.64626f65.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 514439\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"7d987-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1tp1V4suvEQHXz0sAf5i9bSPvYAHUbFXfK9I1RsfgsWFwCMlCDnv%2BzbgIyrbNv3i5i1AgG2fYmGzL2Bj5NAAIPirwcF63U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a0c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":514439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 966 x 750, 8-bit/color RGBA, non-interlaced","md5":"30380675da3b27f2a3b2eaed36976de8","sha1":"1de96041449cd55745b30765c7b46c904abe3613","sha256":"ba176d0504260729c9254f8e156263706d3cb83245c1ac80c67846fb62cc3038","sha512":"e1b7da64adabd6f877550283c7c0dda2432b33452271660b099d4cfb28f33aea8e75bf0dee4be58d84254bbcbba73285a5d5381d042c1303eda36cce1bb49065","ssdeep":"12288:PPb2wgA7nsACQYrcC9hcXep1/pOdmmNaFmwOjc:PPiwgALHCxcEZlpqmDFmwgc","tlshash":"cdb4233e3fe02425939d9a26808c8159ea7c20dfc9ae745fb6071be82290d5736d5b6c","first_seen":"2026-01-13T13:58:34.394782Z","last_seen":"2026-03-05T13:40:52.689921Z","times_seen":196,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/aa40970f24e4498b.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/aa40970f24e4498b.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"974-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tu2gEcX56MaXaEdN%2BIoKFPHludYpiwjG0xDC3RlvJif8%2FR8twB%2FCvm0zAexlkuaA920nB6XV4DELGUzs%2BzOgNSZIgg65Z8o%3D\"}]}\r\ncf-ray: 9cd7377b1ae409b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2420,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2398), with no line terminators","md5":"ad701b551106c508d69103e4aa658040","sha1":"8609892225e5269a122aa36fac5454616200aa74","sha256":"bed556e04b1b76fb383cf0c5d5a347813603b9f189367ac18bfad9dadb0a650c","sha512":"2f055e8e240c3654edc880050c81126a1ca3706c3b8884b58796e4aae0b2a0a042d7be913e9a620772fab1fbe74bc1ee7cfd4b393445adb0aa30956647650265","ssdeep":"","tlshash":"4b4197ada6193bbc19374317d74962d1f12a4d38e27b840095cf87783101a39876e7cd","first_seen":"2026-01-13T13:58:34.391511Z","last_seen":"2026-05-28T13:56:00.709489Z","times_seen":226,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/profile/geo","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/profile/geo HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95RBJWVNl3goHC1aGhWvWE1WIpjBe%2BgMb7Yde3XXKV%2ByapeSnyFXWifubZgYwAc1Xqy2T5kAe7IUWKJ1FwpHmEwmzqUGRGU%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377deb2309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"542122b04fda568516d89e55d6c36120","sha1":"6e28c2bcce9430899f90cd4cb8c54459918e2c0f","sha256":"d77a18a735b5cef136d19ac34ff02534a18bc96127e2d665d886ddbf47cdb323","sha512":"f2532b01e1668c855c3b0430338061bcf8adf13b67968335bf1abefe17f3ce3ffe3fecd97452de655a18aa1de27103f84f84db53b332b7e05d0fe5f5f895d3d1","ssdeep":"","tlshash":"6b60000000000c0c00c000c003c0030300033c33f333300cc0f0000030ff0000000000","first_seen":"2025-04-23T11:56:57.670009Z","last_seen":"2026-06-03T04:21:29.39859Z","times_seen":241,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/limbo_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/limbo_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 552435\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"a9077f3ee03555f04558762ef58aa24f\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B0940E2B55\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEpRtWabkdWIkiIes1kSFCOLOtvq2XpmLnI7N1meHQ3YWhnHdQIec2vkOM5m8Z%2B9y8Sfnf3CCHPXxzLY9Lpn9C9D4XHgfoj9XIfelKvt3hU%3D\"}]}\r\ncf-ray: 9cd737801df30a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"a9077f3ee03555f04558762ef58aa24f","sha1":"4c94d43af5526f4616546fa01d0320e264f13d96","sha256":"ace15addfad66f8ba7b20ffffa60106bdbf641b52ab7192e90c0940509e064ff","sha512":"93d4df9b0d61bfdb7f9885d385e37803901156adaea0a4a82f97ec7ffe8282c4a322737dd09d273197b676fbb58c37aa21e6a00ee4567e028ea82b01de66cc73","ssdeep":"12288:mFmB6fJGrCPZRhJShKeszIpGQxDdJ3n0tNI37E7/bRbxaf00MwlTvAJd:M0EJzBXJlxzIpGQ7F0tN6Q/bRIf00MwI","tlshash":"41c423251857ae136242d3e23e7a4f600a7ca8973c3da170ad4e7a7419c73cecd5b92c","first_seen":"2026-02-12T20:36:03.61634Z","last_seen":"2026-04-28T18:07:01.826414Z","times_seen":36,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":104,"dns":3,"connect":11,"send":0,"wait":58,"receive":209,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/dice_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/dice_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 555203\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"eac4cd3574513dd0b23cf558f1cbd109\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B094C76B25\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FFCem0cu8qW%2Fn%2Bw77oxAkvYXOPvWh7mRzry6d%2BDdd020MCWu7uEVdNAEn1o65CJKj2H5%2B5JDfwSv8wO3WKiGpp9xMgvv8UtSfw6%2FVF7ViI%3D\"}]}\r\ncf-ray: 9cd737803e070a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"eac4cd3574513dd0b23cf558f1cbd109","sha1":"a7512136593b61b5c1df200d7239d07a98ec00e7","sha256":"5716c6750158d15045b25e6694b3b90a35bc04ebba60bdb219a8d4574da3cc51","sha512":"f68ff3f346c7729eec49444cadf1183902ef703c1a4718f18fdc69b831712adced1500bb8bef617d170b67f556c2a427b36af2199bd1ee167d7038d3e1dab9c2","ssdeep":"12288:l84WszFSo0sqYVw/P+40o1SyUNDw/QSQwtDmWrUPHM:lLhZSkqPz1S3M/QVuaWrUPHM","tlshash":"55c423ca24884af3fb0604fe5f1df513573a2562352ee2898c6182df65b2e0eacd54b5","first_seen":"2026-02-01T14:00:57.575018Z","last_seen":"2026-04-28T18:07:01.713267Z","times_seen":89,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":111,"dns":1,"connect":10,"send":0,"wait":59,"receive":208,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/blackjack_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/blackjack_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 564245\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"110c5605cf884b87f1fed24aa95e8c3b\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B093A8D065\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17013\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYqyoDGUZxUwVtFSbWmgw4wPNidR9X%2BowEMIwXQgk4%2BZK2unNQl3VH1n%2Bab7iu0eLW7YLx%2FCCK7gTFGPI0AD5DgPVJezFR8yI29BcaH7y2M%3D\"}]}\r\ncf-ray: 9cd737800de20a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":564245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"110c5605cf884b87f1fed24aa95e8c3b","sha1":"e0217e9bb5443c9d6e2c03da08a0ea92e6c80392","sha256":"ef9db4c5f8beaba04d146b3ebe59be214f427f25bd1fb5d0bec95035d2e0b8ed","sha512":"42e052a28e8780505da968574c0ae7959b59d62199bf0cefc99f36e7aee1ade4d48ac9f78ca532c68fb5f1c10b7bb809dc0b8eb8fd81ad72ab6268df63e32d91","ssdeep":"12288:wGj07s8VvAf88KbkekAYnEOdwAsdf5Xz/lyx7Z7lLwoD93c1dCTR1:wGZUvk8T4eZYnEOSLlyx7Z7lMoD9sc1","tlshash":"acc4233e0bd67276290b168b12b71358bab4c306aed53b1fa25c1c9e0d28b74e543e1d","first_seen":"2026-02-12T20:36:03.484281Z","last_seen":"2026-04-28T18:07:01.788857Z","times_seen":27,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":64,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/bestMob3x.70ac24fd.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/bestMob3x.70ac24fd.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 704020\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"abe14-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrIxu7BCxrWTyu0K6gszWzAvjMMi%2Bqv0v%2FpmqkJQq0wiXeido4MxswRAS59PBvB%2FjicHPqhXXKu5CQ5RrMF2%2BHPyJ6quqtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0809b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 966 x 750, 8-bit/color RGBA, non-interlaced","md5":"6d36c37ceefa1383bb5b3bfdf54e19fa","sha1":"799a3dcc44ebd4713147e904c47e3dc646348dc2","sha256":"96ff60ace32503b9f5639c23027e90cb40b8f87bb600d9d7d6f2847928fb2f20","sha512":"eff023dcde93882620eda3cda5c63cf1a3565dc792dfa86c304de305c47b303a4869033c44dd0a489aa03cbe0520ef1d105f7151e4368f64693c47eea01a2037","ssdeep":"12288:0Y1cLeJyfliKVGbNvbZpaDuVUgASQKHxrMUafVs1WdH+vvNZpyd/QsBWgrTPOarD:0icLewNiGGRrZQKjMVMY+vvNnoQsBWgn","tlshash":"37e42345f86241809c49e67989dbc2d04198ca8f3051f62b233b17fdadfc147b86af9d","first_seen":"2026-01-13T13:58:34.415039Z","last_seen":"2026-03-05T13:40:52.665061Z","times_seen":196,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/cryptoMob3x.6fc5db35.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/cryptoMob3x.6fc5db35.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 586138\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"8f19a-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJUocHajDdfjC%2BkmGUyUt%2Bsm10em1XODdwEhlT1F%2BiED0PKkW%2BM3brQtBfwujkG%2FQzn90fhmRsemmghqIzFI4PKZHidvUz8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 966 x 750, 8-bit/color RGBA, non-interlaced","md5":"75bdb7c3fd031d53818de7bac108541e","sha1":"87bf3f947a3a7d002d0a20e700ea90307f84e925","sha256":"ba8474aa06c179ee7f1341a72b98dd84dcb0944989d39caf8c55268a0bfe8b6c","sha512":"4e5466d19ff2028076965d86d3f23d3956ba3992050ae5162315adca8b69809d6e6ee17d60b459c7bbbeb449aaaed53833b907a10dedf167b44deccc2e9c8414","ssdeep":"12288:6wnzgHorzShEeHBRaUrFbbM7oNzopJ68RGySyw6YKGcpCauE7/:yoKmswU27EzQLfwBKXCY/","tlshash":"c3c423dca6706f29dca2218bdbfcc5c59188299aec8c7b354d37996dec2f732184414e","first_seen":"2026-01-13T13:58:34.398Z","last_seen":"2026-03-05T13:40:52.694526Z","times_seen":196,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/shining.aad5215b.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/shining.aad5215b.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 459470\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"702ce-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JW%2BTkPePN3qRc3w0KTxQvZNjuf5aXqgAIkSk2vagpqhmBG8dVtlR68A5TPU79f1S5QCAe43UR7W43MsNly%2FTLpHBssOdnho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a1309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1238 x 274, 8-bit/color RGBA, non-interlaced","md5":"977864c2f73c66e41059864543f37d24","sha1":"4f69c1bdc2bb8c8878898a1ad9b4baed585772ea","sha256":"c1123fe601bc8a4f4e2c40e04b38f205a81ac426d209e5418a937bd469971aae","sha512":"65e1cb753f598aa1bcb31592f2373eb074d3d8120f37ddcd84d9cb2f4c097c5c6aaa05b986e8127878c8ae4dd75d52fe357461b5a05b972eb8745e1f46fcc2b2","ssdeep":"12288:fbngIGij3rYbESNGCE6rcgACH/R/p9bGMA:f8IGigbJNWs7f/xFA","tlshash":"65a423e31cb9baf84e907294689348441174a59c24f0fbb733d69aa85d48c46b4fefc7","first_seen":"2026-01-13T13:58:34.398899Z","last_seen":"2026-05-28T13:56:00.739242Z","times_seen":200,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/fonts/proxima-nova-extra-bold.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /fonts/proxima-nova-extra-bold.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/_next/static/chunks/20a8f5afeec60e83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40360\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"9da8-19b2715ae78\"\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riDj6f4b5IvfIkzXSAa2wnKO02fyswjdfCrhQcviK61Vq55JzFbmrMBePeXnffu8RKMQO47%2BZZ45L6r8r9OTwyxv%2BXWBt9U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376ffa6109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40360, version 2.1048","md5":"9751aac6a4fb0d9010b379c2a219350a","sha1":"ffb0dfc261897258ed754c48c142b4f3d3181246","sha256":"7782c2ad075823f2cb98512d7af2a6df08dce8da4b2d894118c8b89f4b70e5db","sha512":"55aa1b658f3fe600ea64912f2441ef4981153bc85350b1e1908ba0d86a3b04fd990d0d22ea4395347ae97ccf05618970d8408a71997fbf3f815f8a90374d2d4e","ssdeep":"768:4zAWp6XiMJPL+GkVpkciNgA+lYWWwtIwC6Dr+/UYew475gmmWIa4:436XiMtLRkTwgA+GWpiYitewmmW+","tlshash":"7703e13c913ed0fb958ec9d3154be783a9022a19ba1ebca50c57b88096c6bd1195fce1","first_seen":"2026-01-13T13:58:34.508224Z","last_seen":"2026-03-05T13:40:52.745244Z","times_seen":197,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/src/assets/fonts/Inter_18pt-Medium.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Medium.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/_next/static/chunks/80c78cbd5d83aa60.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKBHK0E0cxesOEE0aQvlM6UhkPZAjAoVtEIQ9ZbtIRBZxcxXGTSkIeGNlrg44FiWSXL6eFPIh4fLmpD2A4kGTI86hUkX0II%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd737700a6309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38618,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23724)","md5":"bea995b4937f1459208d2d13b767d892","sha1":"c144a35d4d04eb3a973f74824845fa255c5dae4f","sha256":"740fcad37dc1f15b57142f41e90e7371a42c4c496ac54b574c1437dff27c0037","sha512":"51175f3d8f2b33b12476f1d5d683996077bfd57ecf8cdd5960bda9722f2065ee133d5491b5f8235a82da0aaa5af861e1d63115a4387ad6032fcd412f0898a3c5","ssdeep":"768:0TyCq1SOkliFlBCRVMbhSmeQjVWU/JvPW:JlBgVMSR","tlshash":"6c039717a807c90a996aed1813ff2f2d00cca5374961dc39f7aeca4d0b8157e47e6e85","first_seen":"2026-02-13T20:54:22.230273Z","last_seen":"2026-02-13T20:54:22.230273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/s3/casinoicon/2000.webp","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /s3/casinoicon/2000.webp HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17572\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"b55b19d8da87b3704feade8c19831ebd\"\r\nlast-modified: Mon, 02 Feb 2026 23:25:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B08B9BC2DA\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYOEG3SXmfkqhCCd373UM8nz4n96ZnxwDqcjdRkbmB4OmHsseKklA%2Bk5m7FJYJEYcuUHZxXue3GwpCTN5GsZlSPWWFaqcyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377f5b3c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b55b19d8da87b3704feade8c19831ebd","sha1":"c4c682951e3a6b8891cc7350c05fb758e587ab03","sha256":"2cd35e597a9e07309b83538e56a743fb1ffeaf9477d3122e00ce88188f07b608","sha512":"062f645de11261f579b73522aefaa82557f271ce80760d8d8347bcc755bfe42aaf1f413495d1fab75f6a4ecd70904bf04c4a42de2dbb022471b8a051aa47a575","ssdeep":"384:cBPhNPw79uXXc3vUYP4nJYe3AaaLthP7TG:0PzP0M95AaKPu","tlshash":"cf82d0cc8dd9ddbf7e1f69f268c7a61de85f26249a1c0e63c661b7500400b641a4361e","first_seen":"2026-02-12T20:36:03.63782Z","last_seen":"2026-02-14T14:49:07.558432Z","times_seen":14,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/56e67c9087d6a5c8.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/56e67c9087d6a5c8.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"3439b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5LZR2hDrRHIrPXGfaj830bYretZiycNoUbATe7Zydd7b7hi1EVs5qMuh4dKtTRqQCWCyf8L76GnyXnYAL1D7sO%2B2hKQ%2F1x0%3D\"}]}\r\ncf-ray: 9cd7376a5a1e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"37a07820d50dd2e88aa5fdbd0a73c52f","sha1":"fa146c4e19d10c1ca936e7a343693326f3d10379","sha256":"73fc269567d6e33502c6d35cfbc3cbf447c2bfed6a5f5272f7825766f0affe79","sha512":"7508160876580439e1a08451f6182cf448581937ccf6ed7fda257645bb804a01ff4cab61af40ba189cbb8ec2f0bcc5e072fd8c6295f69e3d9a60e77ea52f0e7d","ssdeep":"3072:CH/apcwTasn5pRs2naYLlbskmz/pFdE/Y:CHypcwZbll4RxFdE/Y","tlshash":"72240ae83d55f6626ab302b710af1803b33c252b280d4d60a611fd9db57845fb17bf9a","first_seen":"2026-01-13T13:58:34.394009Z","last_seen":"2026-05-28T13:56:00.613374Z","times_seen":226,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ad6b1ddcec4cb5a8.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/ad6b1ddcec4cb5a8.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1507-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrOsXsmevsS4bHPmKXzCiJ%2FwkVAJMHZlRQJ4M6UjL%2FJ7vEDRgL%2BunyUDlsZUP4hHJz8KPmuiWIqV9sia9umJMeqHuox73lg%3D\"}]}\r\ncf-ray: 9cd737743a8e09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5383,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (5367), with no line terminators","md5":"ca8f72b0dff0b15a2220eb717b98488b","sha1":"2bc25662a117a508adce9ff8df2e544624819aa6","sha256":"fa54491e1ebe956f011cca158d6b94328f6596e9f3373dc942dda8a3122679bd","sha512":"db4646dc6dadb068f9f74ee85ce47beec97e71cbc1c97f5ab36dee3c9b08ebeb652f4d710ed1407dd37f0f9156957a0b7674cd520d1625d58686191f3511015f","ssdeep":"96:At273n7i7i7HSK7ViTiEkMxzO2k+NepInmPKI+j2w1Ux4gxaPDvo04n+MLSObghu:PLWWLSK7VWVxg+nqR4g4bvt4+Muh58","tlshash":"37b1c9179364319a0bf70268a19b39d5ab390c16b301c884dc59422c73ee5fdc77afaa","first_seen":"2026-02-12T20:36:03.607191Z","last_seen":"2026-04-09T01:34:11.878899Z","times_seen":41,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3af414076e40d6d2.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:41.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3af414076e40d6d2.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:41 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"3719-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS3Ek%2B4lcY%2BCjpQuKPQWMRGCzl6PysCRLoJe7a4rJEL8uKBtaTzLa12iZXE1ym%2BMue8UydgGzqSVj%2FipI60wV2LdK%2B3Pvn0%3D\"}]}\r\ncf-ray: 9cd737749a9a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14105,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13973), with no line terminators","md5":"f552d8fad4c6e35e87fd003150efd19f","sha1":"277e39792dae7041e8d5e200f27cf10bdf0a9cb3","sha256":"1a04a86e0680d042931561c4a1d5007b0f57c8d52d4315e92e67afa0da7f2853","sha512":"00f73cccc0daa26b38a20dfaa1d2fb84eb26590254bef9fb7eabcb20a7eba519b5bdfa0882d0153b7257015a81626092efc58270b4f373f2ceb8a737a0e2c1da","ssdeep":"384:OBZVn7f9RurWFNhNS0bHygpWqP4VA8/cmmoBPjUHa/Uk7u8fnxDOnRXcPVnX:OTVn7VvFNhNXCA8/cmzBrUHackq8fnxV","tlshash":"48528403ba5c373e4a571363b9ef299537bcd12000b4e04555ba85288bbaea6c1f71ed","first_seen":"2026-02-12T20:36:03.490194Z","last_seen":"2026-05-28T13:56:00.825517Z","times_seen":55,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/943a283ebf65b52a.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/943a283ebf65b52a.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"3f6-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQsGS4ewaEOeKQPRO0NzBUPf77Lo6HktVa7soLr%2B3xj2%2BdclgRH2GZHQvfbyXXjtvH0PSwp2I3EOSzKitEaPPE5pxB7xmU8%3D\"}]}\r\ncf-ray: 9cd73779bacb09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"461d1ce102877eef0868117bd9268262","sha1":"824a289131cdba8a37f93513720cc037b753e6bf","sha256":"e82235c49191583898d3a6171e1f4f58740785bdde62b19b2e574da57ef3af2d","sha512":"20efb0c62beba2376d261cca1aa63e012387c4709d4456ac5f3c59256c996fa2bf8e3eccb7e0a2b5a958b97da579671c5f4b04d4578a73151e8955b166b21729","ssdeep":"","tlshash":"821125d38f298c0c1545d33af089f055ba7ae80a98fa04089be94335317bd79f36ea42","first_seen":"2026-01-13T13:58:34.457884Z","last_seen":"2026-04-09T01:34:11.904265Z","times_seen":212,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/80b5b3a83e5835e5.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/80b5b3a83e5835e5.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1f2-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5VakuBRrAnK4n1%2BSAGSpz%2F2dCTRVkxGicxJDAtWmANB9QwlgHbSIDAd3q9b%2Fyec23uyitiqrhyX6r5USnokeXbHYWEMMWE%3D\"}]}\r\ncf-ray: 9cd73779bacc09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (498), with no line terminators","md5":"2a6332fd46de048523a45e2e63e85044","sha1":"ddafe71e7f76a02674a9a17287b68cd3d3a5f820","sha256":"71691e84d74b6c6ab66b2d6091bcea6aecba5f7d38d46c9d4385299f81b83d71","sha512":"002f7188f6b9b2d7eb2d8994c84c81f835de272fe012c59c2319aa30821a5693295159d1ce722cea98d17d19e538eca4dea76d3dde40165fcf16bbff41999956","ssdeep":"","tlshash":"90f0dca7f50d88e408c472197821633f3ad01af155ab9673c2ae4abc4bb7f5478c6455","first_seen":"2026-02-12T20:36:03.611852Z","last_seen":"2026-04-09T01:34:11.895562Z","times_seen":41,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/bettingWithoutLimits1xLayout.b6361f85.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/bettingWithoutLimits1xLayout.b6361f85.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 503048\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"7ad08-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8YpjBBlY9Foezx0F1BpyQ4XILdm8Bt6rlX44gxy62GXk%2FR3DvWV9MoEbClNX4hHBaYJ0P6J37uKMta49r5Or4j6JNvvAj0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a2a0609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 399, 8-bit/color RGBA, non-interlaced","md5":"491483ef8f8843f66ed1589a734cf0dc","sha1":"845d3e63afa19a08750094149b72ffb3d94d76f8","sha256":"373c2144969fa7c637f6f889c69ab276b6be638ef51e4cb063315756bd23f4e7","sha512":"211e10aef7f5752208f1abccf15b7cbdf086c3ab2e449d695b8396d3ca92690387f2665a86cfd6e55a6fc7e99268ad3a6b7976a5adb412e1ff413da13858bf53","ssdeep":"12288:4BRIpfu3vbsYBWfhMAwgHr7KCMbUMuWrqIIsJbUi7+rSE8x2tQEMM:4BRamfbscA9L7+IsXIS7++v2tQ2","tlshash":"88b42362f6a778c3ed61d235c7252a5d93d1fd504b28cbb0cff210a552606ec76b2a2c","first_seen":"2026-01-13T13:58:34.432898Z","last_seen":"2026-03-05T13:40:52.72759Z","times_seen":196,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/payoutsDesc2x.756f8294.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/payoutsDesc2x.756f8294.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 340596\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"53274-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9KX5%2Bho%2B7Z6gldJ0rjPlaW7ygd4hLBXHlB612mVgkq7rA6LJu5I8cb1COAFipKYWQBAUPpk4N%2ByPqdGPEv9E9hXI5u91WM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a1109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 838 x 500, 8-bit/color RGBA, non-interlaced","md5":"7703334a1a51e85578e6f8f7748e2cdd","sha1":"14ce597ec9b218ec6f6ca7e88089bb16746bd542","sha256":"4560e3d8761dbd8dba7c45580c6ef887063964af756c0522dc8545d25f5a5fe2","sha512":"f4e294b8780b1b54b56b35abb6c8d8e35dbda251f64870d9b721dd2a44e6acc78680b0fc4b33caac87f66279bc5c0fe4315ca6d1a5c6eb8303f347788b751d8d","ssdeep":"6144:VkSk6IUy+w2UpYeJ1gDYGklaHqlY6I44WqRpOkGD5nRHZPCKOcO/Q+:dk6IUyDz5vUzhrReD936K4/7","tlshash":"9874238eba696171fbdc2ef488b9a820c21511041579c12bf87fd1acd89e5e075cfd3a","first_seen":"2026-01-13T13:58:34.41572Z","last_seen":"2026-03-05T13:40:52.666819Z","times_seen":196,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/accf940692610c13.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/accf940692610c13.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"e1d4-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghj6OHmDoyfKoJvwu9XL7sI48q7tQSe%2FQbQIkezE2RRdtdkM0%2BhLIUdWWJY%2FhwyI%2BmcWBdyYq7ZCBkzpQVl7Dc96DSyienA%3D\"}]}\r\ncf-ray: 9cd7376a5a2909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57812,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57812), with no line terminators","md5":"f54304db04496433b07beb8a07dedc37","sha1":"cae2db299cf5a780628c4ad2e2ae7b42ea572b14","sha256":"326afce1783fe02a70e68e44b20ab8c17d0bf08bc418d4dfea8b5eadb2198107","sha512":"3de05ed81a6cf07b61208850d7b3d6b9aa68fc506bafccd75144cbc18ee480f7014b35d2a7ae9f299490e501315b31a2a4c3a868ee6ae03dc03ffa03510b8878","ssdeep":"768:cdZfa4VxZhTD84cS6a9UkVBEydFszwiKrZRpTy8Y3GJnwxGis/0K5FaNDMQoawx:caQ7h36nlKZRRyh+wxRcLWBNwx","tlshash":"194319c577a1b02243a751e9445f140bf27dea39984c0868f251e8f728b5a8d86fff78","first_seen":"2026-02-12T20:36:03.631901Z","last_seen":"2026-05-09T07:37:36.90707Z","times_seen":53,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/new_casino/categories?limit=20","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/new_casino/categories?limit=20 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8o%2BFRDmGIv747onA9ELEaB2PtisitmO9Qe%2BbP0MlCCdbJGcGDI9ElCT970SkBMaDgCPxjPh%2FxB5I0jDoY3tbNReQPQwG34A%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377deb2709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9bf67b80a856862d7afde4d9ae57ddce","sha1":"900bffbb79c857666095460c3c8bd90ba6ccc9df","sha256":"189e8ea4f1d1140bad0e5ba0cf2f2700077dc78d76ad6b2d903ca3835fdcec33","sha512":"b9b0987cfa8baabdda0fd3d7335eea28428ef27657589a2d02291bf0ab2f988b4f6fa8d46715f14e2cc886d877560915ceb5efdef0a18ef2ddb5e314456f9dca","ssdeep":"","tlshash":"11d092b830e728ee6f562d00b14b28ab608148133ea96f80c4dc4984b3caf0c221a101","first_seen":"2026-02-13T20:54:22.260122Z","last_seen":"2026-02-14T05:19:22.097468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fufc.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fufc.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9979\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: PPw3C7ULXn4wQwHn3RTK0EgawJWeKzUbvkDhZhEgl2M\r\ncontent-disposition: attachment; filename=\"ufc.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtGKKEZ0dMyAwQzSR2xA7e8N80MKxyboAN%2Ff90luerlOwSqnihc20fIGeetssIKl1o%2BdYNIzwIWWEZBuYceaQmXKVeF34S4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737712a6f09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9979,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1ee4d9b91df29426ecfb9eee7a84f7c6","sha1":"deb3aae8f3b43053081618bb12a01f61a1911467","sha256":"3cfc370bb50b5e7e304301e7dd14cad0481ac0959e2b351bbe40e16611209763","sha512":"a8a82dd9eaefcd15b177ba36d99f4cdd837605b512cd32eb307e27cacd5116f26b3d55196a7cded085a5741d487749377b6303b6277a0941b217f39ba915197e","ssdeep":"192:rGXFVjJLCnWHm+unCp0Sqh7SlmHgeKYVnYLAAkAktTykeULu80o:rUVt+nWLcCvqh7SoWYVYLpYtGlULr","tlshash":"8022bfe4a0103c9bfdd401343bdbd7d1a4634ded41abea6d1711a3268671ea58c7b44c","first_seen":"2026-01-13T13:58:34.477608Z","last_seen":"2026-05-28T13:56:00.734248Z","times_seen":209,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/e58004fa60875eed.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/e58004fa60875eed.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"56a-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdObsWNDez9Rxdy4AAgnMFeJ6tJ1cd0plWGpg8ym0I1WiuinCmAX04vs%2F96TlWhvYeU7UnlzatzelpqMuMdmnYZ%2BlDmVUs8%3D\"}]}\r\ncf-ray: 9cd73779bac509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1382), with no line terminators","md5":"cad4d7ce3ebd47abfdd10fb1ab546a33","sha1":"702aec8e78dc8eda208fa90b29db007f2bf27075","sha256":"c7ad2c547ebca4eac43072506d3ef6f47f2e79ca1e227533a709f8f6244f97ed","sha512":"aecaac8ddb0cc3eaf89e357b85a4b266b5838f3b8f0e6ad4da56048ae3b8ca0b191380161ae4612cd7302bdf740b15a6c7905ad0da21b69047c3239c873538c4","ssdeep":"","tlshash":"f421318d4201ba581013578cb0e22760767d40d9d4ec806dde9d0fc8a1bb138903f9fe","first_seen":"2026-01-13T13:58:34.409252Z","last_seen":"2026-04-09T01:34:11.905641Z","times_seen":212,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3f2df0a9f0c8c9b6.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3f2df0a9f0c8c9b6.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"9c50-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtXxZkGwLqQk2aXQKFu181WzM1yr%2BEQwuVIhxbMTJHxATRxdIQ1Ee24P%2Fzwk1iHg9kTAJ%2Bg%2FmXd5zLUKWlFVRaJ0OnLvS8c%3D\"}]}\r\ncf-ray: 9cd7377b0ae109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40016,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (39935), with no line terminators","md5":"c7cf8464e534d3fe0cfdad902d310489","sha1":"b947e51380452c9370cbaaee8cd1915d6573423e","sha256":"8177effe603ef1689fce7859cf54d6fc4afaeef8430affe1c7c280818dcf641c","sha512":"81707a3c7ab33a871430e6daf613da508a3e628d6a4a8774a1b491ca74c7498678c97026ad579f347f31fd816e74060626b3599ca02a2dc6beac91ad3ca2ec8b","ssdeep":"768:s6lPc9kgRKuW2haDtDR6P+WE8uW29mIQ755:Plk+gRKuW2+lWiW20I655","tlshash":"9a03e92fe75a237707c302d63acb4adaf37aa05837b69594c858c24c1396f6c8337665","first_seen":"2026-02-12T20:36:03.452939Z","last_seen":"2026-04-09T01:34:11.900083Z","times_seen":41,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/bd84bd126a31c6d7.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/bd84bd126a31c6d7.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1f4-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVynuCddKFjV%2BRnzyX7wHnQ3hU28ms8RyH7rgpgsUXqRKVqaQWGayHK23WbUNIFKGQeJ%2BqonJkbLjpkUC3LKy9yMFzQy1%2FE%3D\"}]}\r\ncf-ray: 9cd7377b7af509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (500), with no line terminators","md5":"4f5c682e79c6a7641a935d9dd9410dde","sha1":"a0975509f7466716edf5511e298f74f9f0fec7e9","sha256":"a3a928e75de69d8e8cf72da2d3ad2eab8b47a018c2bd8fad71794067d9d78fd0","sha512":"bac8698096fdd6a04c0577946a5366ecb06d20fb0c5619dc4c012404d0a89ee8807281632f8a7e516b95b6d267028ed85a9893df2102f264db2eee652ddc3b22","ssdeep":"","tlshash":"c6f0d4e74651d0a200d436acb1335e5e38e511598f4dee77e5690f7413f131bf9025b5","first_seen":"2026-01-13T13:58:34.411554Z","last_seen":"2026-04-09T01:34:11.951281Z","times_seen":212,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/user/domain/settings","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://auras.cfd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Fri, 13 Feb 2026 20:53:41 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uRaAk%2FkU7E4vfQLCCWtadIl7lsFhSP1nZwq6g8kfwPzWAumowMlyGjmEcoSudecEXHxcbx0oWS9ua6TV%2B4vxw8A%2B%2FJ6zRs%3D\"}]}\r\ncf-ray: 9cd7377deb2009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2f4c8d1ce45828ffe0f6991222870e3","sha1":"f174811990dd662ae70f9e3ba4272f93c5d6910d","sha256":"41c643e6582c7427f070c096e165928c3522e07fbfbd96bdab061a3fed93e17e","sha512":"e3570a5b6d1151540bfc4650f16097d32f293641fbd78b4787111e1ba68101e0244eb3b57bb054d300058d5ef5bc5327b599be3ca3973e9f5096e7a042aae798","ssdeep":"","tlshash":"2211292e441439bd85d9d52acb1d3c07477ed67772321d28a79cce3416e70b11628527","first_seen":"2026-02-13T20:54:22.037598Z","last_seen":"2026-02-13T20:54:22.037598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b5bd3a35e6b5b102.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/b5bd3a35e6b5b102.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"dd8-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dLSzEFueN%2BlykddyhrOBwWrQ4mmqonyNsvlvFc8NZPTERE%2Bpf%2FV7GhJOAE%2BCRnwrn6%2FAI71%2FTvoRlER%2FTmLd6jMnCD2jy0%3D\"}]}\r\ncf-ray: 9cd7377b9aff09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3544,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (3534), with no line terminators","md5":"fd0985f639e0ef008b3ff0d1aea89d4b","sha1":"c2a0be0eff482a8f1e3e3d2faf820245f9311022","sha256":"b192c152e4df1a8fd84806aa42fb1757177f671f59e682e5b32c421395e07f6f","sha512":"3d7245482e776ae0facba6c8c02a15b38377953c4b1303bfe33e0290a16f1b7b70bb72649c206c6da36d18ad470a5e5c4e9f36314815e339c05f4e658b98b6d6","ssdeep":"","tlshash":"2471c61bc31872a707d311483eda02ca673aac4d7390c8a8de7c421c33fe1588637b65","first_seen":"2026-02-01T14:00:57.538934Z","last_seen":"2026-02-27T13:26:05.396803Z","times_seen":81,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/fonts/LemonMilkMedium-mLZYV.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /fonts/LemonMilkMedium-mLZYV.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15664\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"3d30-19b2715ae78\"\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4J7VDeC7KJFYQrACA9vvu51Gs7r1g%2B0YwZDwhrx%2BM04FXMP0eE71CDT8dXhHlPcLz1Z35Nec3PtkSNC3cz3BYyPtc36vgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a6a3309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15664, version 1.0","md5":"29e8a37a85b730f1486a2f1006da40ab","sha1":"9a2398188c9d837067342a92507ebacc38cd74ac","sha256":"6eaff8f74e006352147a30270c11333cde5ae944af8df06fc0e0e6d6a024b579","sha512":"d5c2004b7caa55c6a8a8c816f0edda33ae15b104907397fdbbe5a78c07866738db6a916002572362c584f81f562fd38b1d398ad28a5fd05b8b4d8357a33be1a1","ssdeep":"384:4wcK/SVdYbLKTpMr80tNq78vOqEhLL98SR6OGk+l27k7:4wcK6VSbLB8kq762x7Rpb+l6k7","tlshash":"f462c089e9f99558e2b17a2520f187e7a508c332cb26b5f8f209388455edd1f1c20776","first_seen":"2025-06-23T17:45:24.278891Z","last_seen":"2026-05-28T13:56:00.698411Z","times_seen":230,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Famericanfootball.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Famericanfootball.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 12290\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: rEohpB0uELZeTAofGy-gaaR25scbgTmh02nG9n4Ljis\r\ncontent-disposition: attachment; filename=\"americanfootball.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MO5AsXXMg10D%2Fp%2Bi1%2FVlEjavuaeXxa9HHsPGJWD7CoYWxma4o1CJMeZl%2F5s5het8bhymA9fsIyaUFSHBPPLcw5t%2BX7QLVN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737712a7109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12290,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dc825b0c5007ffd61d17378da03fab79","sha1":"e8ee47c85c9760b94b391f8d3806f4e73304fc8a","sha256":"ac4a21a41d2e10b65e4c0a1f1b2fa069a476e6c71b8139a1d369c6f67e0b8e2b","sha512":"c625d5d581aa6939d491d98c76be6f62d4b62145686c2566c51014f7262a5095b8c61de79aba62dcd4128b66128cfc0e9324b43ad8482efddcc18894a35f446f","ssdeep":"384:r2L2qSa2m63/TMBWE5p3xWMdlaxK02jP401lTxL:K2q8/ABWE1mHwbdL","tlshash":"bd42bff2b89f6c46c08cf270da97a4e942e64b5415abd6a4098d3110e8bfd5f8459f18","first_seen":"2026-01-13T13:58:34.457056Z","last_seen":"2026-03-05T13:40:52.658877Z","times_seen":196,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/ae27942b7096491c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/ae27942b7096491c.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"7ba-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BI235IK2VP1dlwLQzk2zoCKwtrponGpUHkuDSJ4VTgBqjseuDgMA1VVExGHfkVm5JPZK4Y3wntR0DE0raDV5OjDdVFytP0Q%3D\"}]}\r\ncf-ray: 9cd73779bacd09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1978), with no line terminators","md5":"822da84f8ac41fc80b5fd0783c88b282","sha1":"56e1ac390f64ced857c1daecced8fd5104330e30","sha256":"2523768f0fe0ed586a3d42ac371eaa76eb5d00e5058c7376dfb3e14d4707ae5a","sha512":"fda5f5359cbb1a7acb4f4c325841c6dcd27b92a25cf250edf0f84fa9e5dc7bc809de085322ed336f768e911bf0d0f000637b6332ebb2724cf173fdd71e1401a1","ssdeep":"","tlshash":"4d41349bc509961a1bd3432efcc15a86bb36211a8eeb25070dc9466302607bce35b2f0","first_seen":"2026-01-13T13:58:34.516024Z","last_seen":"2026-04-09T01:34:11.903751Z","times_seen":212,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/icon.svg?icon.6a5f09d1.svg","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:43.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /icon.svg?icon.6a5f09d1.svg HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXHIv9zVN4DVms0DA%2BkdKdsatNbhzTqzJTWTNP6GEvr5W18q3oJiHLzeFkYrDr%2BS7Tl6MITPqkqpw610bxu43WIT3HRLerU%3D\"}]}\r\ncf-ray: 9cd737828b6109b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d463307224bbf1e821b1a38b65fa0269","sha1":"98c13ae050591c19768fc5dd32a6fbc9038e3cd1","sha256":"5163f65b0d9b8b660d5fef6aafceb1c6264cbfed84b637da9e78e86a3a9a6910","sha512":"a9116506d381fa3eb52f4446408b1e4fb8ce00dc004bf58b29c96ec41dcb5eb57c31c5bfa3395e7455ab87ae53fcfae97950b98b5d946684cb4a839aafb0b740","ssdeep":"","tlshash":"647188fa53c8b6d0e507ebf0cd3614346a5b28febf55c28549aaade9e53144d8c9cc80","first_seen":"2026-01-13T13:58:34.43113Z","last_seen":"2026-05-28T13:56:00.598868Z","times_seen":226,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/assets/homePage/bestChoice/logo.svg","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /assets/homePage/bestChoice/logo.svg HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"e05-19b2715ae78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kgKEeWTK1Y6qK6oVU3uWqAKDguJQfmBpnsORayzBwz9jTnPap9eEmWBcCnGHQ3v5E31CtzdeLnj94Jom07%2BRdVBuLQd74g%3D\"}]}\r\ncf-ray: 9cd7376a3a0b09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d463307224bbf1e821b1a38b65fa0269","sha1":"98c13ae050591c19768fc5dd32a6fbc9038e3cd1","sha256":"5163f65b0d9b8b660d5fef6aafceb1c6264cbfed84b637da9e78e86a3a9a6910","sha512":"a9116506d381fa3eb52f4446408b1e4fb8ce00dc004bf58b29c96ec41dcb5eb57c31c5bfa3395e7455ab87ae53fcfae97950b98b5d946684cb4a839aafb0b740","ssdeep":"","tlshash":"647188fa53c8b6d0e507ebf0cd3614346a5b28febf55c28549aaade9e53144d8c9cc80","first_seen":"2026-01-13T13:58:34.43113Z","last_seen":"2026-05-28T13:56:00.598868Z","times_seen":226,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/image?url=%2Fassets%2Fsports%2Fsoccer.webp\u0026w=256\u0026q=75","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2Fsports%2Fsoccer.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11801\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: xWECm65S3F2Yo6LlS-DrXESdVrtvij6FFy1a2nOZw8s\r\ncontent-disposition: attachment; filename=\"soccer.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNdV2mPWiepyUs71s61XIpuzjAxF%2BxhDpGIOtOlck0vq7PxGmnkZ6cItOHRvBaZalZ%2FQH0xHsRr%2FVV18AEN8K5xzhaq0rVs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd737711a6909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11801,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7e149fcdcfb7ebd25d6dfa7e27066dc8","sha1":"8ba9bfc2f67be81e1f354eb0411ba5f1efb47245","sha256":"c561029bae52dc5d98a3a2e54be0eb5c449d56bb6f8a3e85172d5ada7399c3cb","sha512":"6752803b4dd5bd6d191c73f4a688d55353bb89fc004486db555b84de7371fd7294e5251c96dabd9932968865ca5dbd15ca0bcd278607b525974d0e8f5da0dc5e","ssdeep":"192:rGGVc7qlBRAeLAuT5Pk8qDeBd3xwcyat0nDjQwzn/EWO3+bRk83AGxK8U:r364BRbLT+8q+jqe8znsWO3+bRksAGxY","tlshash":"0732c0138467b005db3e23768c9851c68b28ed6e50335798fad0e0b8701953bd11ff8d","first_seen":"2026-02-01T14:00:57.602229Z","last_seen":"2026-05-28T13:56:00.619887Z","times_seen":95,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b7110877769f0f22.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/b7110877769f0f22.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"101b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lkw42Ed1ys7tfOAiCgk4Cc167AnzthnrvA6Bx2bLeEyMFTmLUX90C%2F2FTm5pIIgUVw9%2FStORzFWLC%2BSEdHyvbYITc%2FjvLE8%3D\"}]}\r\ncf-ray: 9cd7377b7af609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4123,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (4115), with no line terminators","md5":"23bb12ea805c4ff15041d5d47dcbac5a","sha1":"8ac9555e1d7cc34bc18b0044cfd973dae71a9d35","sha256":"8284d018dbe1da8020e3a56c8d8d2eab346e3f095f15dab9ac816e6abd37eb40","sha512":"1dbd31e77b234c873adee13f73dca5007341e64c62743dc1f7dee735da4a035b37aa1e6fbaf065d612d453e7943177b276631b1cdbac3cd9ac9f68d3a08ec994","ssdeep":"48:uD9ee91MYEHcLzmvTS7BCFAUA8BTOQaKz+B0hpANEXa5dEXvUq3zqNUq+oONUqhB:RyvYeBrwNIRNFsUq3z2UqmUqJ0YAqY+","tlshash":"6281710fdd060378074681a434ff1b9ee53ca54af1f685979d1d863c22b2bb2827e399","first_seen":"2026-02-01T14:00:57.510483Z","last_seen":"2026-05-28T13:56:00.749727Z","times_seen":112,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/instantDesc2x.7db6bfe8.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/instantDesc2x.7db6bfe8.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 211155\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"338d3-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3%2Bxy0ATBTMyHa4uOd9T70lXt5u1nVTbQDa4hHP13rgBzNEf%2BhDNkmP2YEDfxgYLBFCclTbonA4QXMkk1NWMIOjtDLdsKPw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376a3a1009b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 636 x 500, 8-bit/color RGBA, non-interlaced","md5":"eebdff6ec96da31b9e23385a43712171","sha1":"39c8ee1866c2683f7822f27e264813b9a17ea4a6","sha256":"4331573bc8edc63f722a9916428896906c0288694a87d979786a463f2c91f30c","sha512":"24c118f4ac446cdce4bbd2e2da8ea06a09dfc9b0a94f157a5857e49196858f1d459f307cd6d6120ee9bb549d20b9df0bf7d1e40d621a036f8ad215e81fb5a1c3","ssdeep":"6144:MJ5t1y08SapZnbppa0qxrxOQ17misiQVuD/khM4ZuZ:cPd8Sqbja14QoigmszkZ","tlshash":"9f24236679a65c40b3864e72c5b4809de79ae25233ae5ef13e41311bcd10f4d3f4bb86","first_seen":"2026-01-13T13:58:34.403301Z","last_seen":"2026-03-05T13:40:52.768302Z","times_seen":196,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/a8808de2127569cd.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/a8808de2127569cd.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"41a-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THtW8Ew3bNQdnmKwFEr1yx3ThyRnSmyTlVRgA485c9Zl6vilZCV2r2ordai5Dl3wY6ZDd1W5qDNSwYSIIDFqNtyE9SUGtpc%3D\"}]}\r\ncf-ray: 9cd73779bac909b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1050), with no line terminators","md5":"0ea1b9253e3ed7089d054435ac46f26e","sha1":"2fa15c822c4ee1b38c308adad8ca16268ffa4d9e","sha256":"a229cd15a12b0326155b70ee20391c72bbf66b3c66f08f56cc11a47ea6dfd2ae","sha512":"4254104610b9e5bc89ecb4de7fcc4e965c3b5ce63e571221fa9fdb76caa29f8a04b5c4da07c1ece73d30ff5524f390728e15ddaa1c45a3526a5d1fd21b6f83d9","ssdeep":"","tlshash":"b31121d4a2875af909ec32183879c526d0f013cd808dc457ceacd12031f3e61bd91791","first_seen":"2026-01-24T14:43:36.985114Z","last_seen":"2026-04-09T01:34:11.860191Z","times_seen":210,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/5e9b0ec455fb6ee3.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/5e9b0ec455fb6ee3.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"42b-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaF5IlcCHe6OCt%2F2qQk3%2FhxB8CGsgaLuZqmS%2BiirM0WpN79K4ahYDrn3jQyv55sdk71i3e3aFv%2F7tPi6dhLwEUlA5Pvjo2E%3D\"}]}\r\ncf-ray: 9cd7377afade09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1067), with no line terminators","md5":"4c879ff8280498538cf3276f8ab0de27","sha1":"9aa1af1760c677a2cb81a92384441238f1b3ec61","sha256":"103353ff138b3df27b2dbb80c215ce66da6ba569938408bd9556ef7801fb0c86","sha512":"89c2d5ced9c43bb93155ddf6f8eac732b0c70466f66434274eb219d18a57f2bf53d42031965eada09c49328d9bd169078f4a870636f86f18ba8401cf81531a98","ssdeep":"","tlshash":"5a11fc5b081b4c1a542140f418da7b87beb85c9f81d9801eed8d9797207ace87447620","first_seen":"2026-01-13T13:58:34.390631Z","last_seen":"2026-03-15T20:04:55.021028Z","times_seen":211,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/37bcdd8cbb92bee1.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/37bcdd8cbb92bee1.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"78c-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTqkgCQQ4VbbtyHSYdPdGwDHEyjAmF%2BqUeiC%2Fr%2F%2B1zMBjNrE5cwrAZyouDBchd6eYOSNtfEb8T%2B0Q5ah6kh2MYviZaJ8GwM%3D\"}]}\r\ncf-ray: 9cd7377b0ae309b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1918), with no line terminators","md5":"4bc8257e12e6efd6f13bd4306f0e6641","sha1":"6c686776674307b242c7fd89da354c2686a33b6f","sha256":"9dc7ea545eb3b017d9f4a753779b3ed63895b76c29d643a23c10703e525fdd64","sha512":"4782d1f38fbba246b6f5856abc42b5958727a20f707bb256e008581a9564bd60ef5542d0cc9518922f5202615333d080f5a429e5ec8dceba074ca3c68bc23fa9","ssdeep":"","tlshash":"624154566318316c47b7050862a667dbb73c5124a314c678ce9d852cb3e6ab8c2fe5d2","first_seen":"2026-01-13T13:58:34.46114Z","last_seen":"2026-04-09T01:34:11.92593Z","times_seen":212,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/4542b55ff482d5ab.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/4542b55ff482d5ab.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"251-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtQqIQF5VPH0M2dy2WkLGMTNpCrgxF06zomYz%2FJ5ZUmhc1zH7udhEAmY7KrvEpNSTCFSHRR86rQi%2FJTZRg%2FNth8PycRLdio%3D\"}]}\r\ncf-ray: 9cd7377b1ae509b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (585), with no line terminators","md5":"279532cfbd7810bb6138fb2eaf4e369e","sha1":"6cc9d9affca5e9cf4677154927fef8c86e575968","sha256":"a789cacd4f859dd5a8dacaca7c22df87206b09af2821359a5c74d66474214653","sha512":"51681adb81e93f4e4e12491b18cabad8239187591ffe053637e277897585ac0f07703f59d261d59c6fd5a79e4a367f8677a8e2cd27d55c66d6dd976714d2ee0f","ssdeep":"","tlshash":"43f08badd210aa2d6a47d1acb2bf9765a6b411a3504d1c03ad8fcda443307dea9340cc","first_seen":"2026-01-13T13:58:34.423074Z","last_seen":"2026-04-09T01:34:11.917205Z","times_seen":212,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/688e3261a170e82c.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/688e3261a170e82c.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"9c7f-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnpCW7rh9j3LbBYDjfSa%2FYapmnNxPTmqXPqk4en83wektuSIB6nJpSxmNl8ASkuZeQ%2BcQuhvZUeYL4FJzH7SZRaekQUXsFI%3D\"}]}\r\ncf-ray: 9cd7376a4a1c09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29363)","md5":"a4d785f903b3ed880dda3443db0b0506","sha1":"94bc3d7edf03cba2bbc9d9d1e701d13f71c54efb","sha256":"aa5fa196a32fbbcfcdda28edba4b1bddfa4b6daaa00360f74dae538ac06768b3","sha512":"06c6405b2d9cb690812272aa203d224c706906f81bd9251be95570576274445a2f7196b6aff054b648f74ecda9baca5ab46c08a4ccb53e2d395873e07820c663","ssdeep":"384:O7Cla6CWCmLgG4AYHfcseD1ePEbKDRb1Jn/hHh4vTAfmUb2ZznojLD4qtgQZrIuV:ZlaJzRn/x/2xCLD4qtgQZrIm","tlshash":"e103b5b572d4faa2029344f0d83f100af23d4c7621adb4b0a7e4dcdb799458d92b6f99","first_seen":"2026-01-24T14:43:36.951166Z","last_seen":"2026-04-09T01:34:11.858554Z","times_seen":210,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/a5c8eb01cea61f04.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/a5c8eb01cea61f04.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1fcb8-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2JBWLaxniCds52m5v719csgE%2BEi0UwlKeGQldzMSnEeNlpA1iCo0d%2B4aeOVSI1UsoKnhnAYjg3yTZqfKecwGG5H2F1Dfg0%3D\"}]}\r\ncf-ray: 9cd7376a5a2a09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130232,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"858ea4549a04f10df14e31dae7b216fe","sha1":"c7ce85780e7d7472114fa25800dbd80760984a51","sha256":"88cc7a4bd9efc3b97e55a63b14c54b9b1bf743fdf204c2781527912c32761dfb","sha512":"5f4a785be76d8c9dd92832c98d1e31fde6b7657d2afd59477c027e47cf47da8ed8821a00a063d7849b6c330df332528ca085f12b8cff086de571dea9796ed1f9","ssdeep":"1536:10AtS8CUg+gDo/41xV175V0Q+VdWhkCSi+GvAkvkJwGRxPxdZArIlxXHSHTq4Twx:+AtS8hf/41xVuamiBpk+GFFRz","tlshash":"d1d319ea73517521d3db5199c0ae4b41b33a58d83009403cb6bdedcb296099962ffb3e","first_seen":"2026-01-13T13:58:34.451874Z","last_seen":"2026-04-09T01:34:11.890111Z","times_seen":212,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/b4b8052d07fbc6ba.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:39.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/b4b8052d07fbc6ba.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:39 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"da296-19c583204d8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbQh8%2BDVSA%2Bl9HkgOhg0DzxP%2FnNz473ZbqWGY%2Fc%2FCnjdN4Fj%2Fp0V8Wllbs9UFHKWpUVKcp4semi2%2B%2F4w4Q1P%2FGY0%2B%2Be7qMc%3D\"}]}\r\ncf-ray: 9cd7376a6a3209b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893590,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"414b6789dce4bb30ff5e3473c64cabef","sha1":"91dcac40e2ddd719e9d181b812577c417b37baf6","sha256":"4764b38173afc00324923a1323e470621c9cb4d5aaf0670f2b499354cf9c91a4","sha512":"b6aa2f1157e3e81f30df221c4e9f1e12fc02103b05168fd8dfd83bc3a8b0e2428dba6eb116c4fe158ef98a55c271af3ab3bafe3ed35f0846267c24968ff54b05","ssdeep":"12288:z1CEUPlcmCAzCY/gAgPDXON5v+is6kvt2KINQBWSKjF7EA51NuzygKGXhSyYfju0:7H2byQFoa9Ggy6ju3mZ/8s0J47GE","tlshash":"1f15d0b41f996ffcab209ba8c5ce18e92d1d03db9241c4dcda5e6ea0937205c5ccdda1","first_seen":"2026-02-01T14:00:57.525197Z","last_seen":"2026-03-15T20:04:55.13583Z","times_seen":96,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/chunks/3f787267c4bb3269.js","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/chunks/3f787267c4bb3269.js HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"1fc-19c583204d8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7YKQswf%2Fh0IUdH52JBitOOFuoCJvfTRihrpVqb9%2Fpq9hU1MIhqKYm1%2BmuZFIj%2FaN5S1Jf17jxmaowSxyFALP3NkldGYt6Mc%3D\"}]}\r\ncf-ray: 9cd7377bab0b09b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (508), with no line terminators","md5":"9a70e838cb6c236474e4ed529f94ae28","sha1":"46cf97324f59980177e1693482609bb8632017e0","sha256":"3370ed272581b16bc4c49faa4a2984a010ef8de7a3b64d3803304319dfd796d0","sha512":"b6b5c156d9a6d1fb133df35aad8c76184bdca5d18faf5bb0cde0bf8b7fe7a7a15bed51d0fdf77f92029035b9aa53f3ff1f9d9e4156ccc2449bcc20ce7e465811","ssdeep":"","tlshash":"03f09e2809516dcd1c057a7cb864af46317418a640dd8e1c2afd4cf892f7f44d8250a8","first_seen":"2026-01-13T13:58:34.39722Z","last_seen":"2026-03-15T20:04:55.02275Z","times_seen":211,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/blurLanding.ee48df05.png","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/blurLanding.ee48df05.png HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 150465\r\npriority: u=4,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:42 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"24bc1-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uuKyrTZBUgmO7h9bTqOZr%2BpeLJrH0Ro0g8AnvcpSLk4cP8vrlsIDLVBKpeMXaEKD893In59fLmURGzxSt3IxKPNYq6x1BYI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7377ecb3609b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1260 x 345, 8-bit/color RGBA, non-interlaced","md5":"6ddc5a699f41b4b738f083a89a595f37","sha1":"e4f7b2c7972ea8bc68457472f1fc3c409db27138","sha256":"dfd4cf8e9a62fc36c73ea12b5d1acb3af1688357655a240075d200f58f2d6885","sha512":"a2cc5785babc2499494a6154e327f3914345077607b78e341891419818c08e04e74dee8fc55f289f514217a78b4e41e9eb3b2e9dcdab8bc85de0b7e6c6fd6cd0","ssdeep":"3072:N1Pf8v/DGkxFEA0wDgA6nHC24+n2Kqrlpkw:NR8v/DGkx0uFAh2Ke/","tlshash":"8ce313aca394b7d968c9d4c9771a5aef313f6aa710448f36d16c7c5e012d22a84fd228","first_seen":"2026-01-13T13:58:34.410964Z","last_seen":"2026-03-05T13:35:06.634065Z","times_seen":184,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gulfstreamgame.com/s3/casinoicon/crash_x4_v.png","fqdn":"gulfstreamgame.com","domain":"gulfstreamgame.com","tld":"com"},"ip":{"addr":"172.67.146.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:42.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gulfstreamgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:20:21 GMT","end":"Wed, 18 Mar 2026 16:20:04 GMT"},"fingerprint":{"sha1":"A3:68:3C:2D:33:73:42:4D:F0:C5:B3:F2:FB:9C:80:82:B9:2B:D6:97","sha256":"D3:FB:C7:F2:0B:EB:34:12:96:8C:F9:4B:0E:12:31:65:20:70:45:89:9A:10:EF:E2:0E:A6:4F:6E:58:D4:25:44"}}},"request":{"raw":"GET /s3/casinoicon/crash_x4_v.png HTTP/1.1\r\nHost: gulfstreamgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auras.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:53:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 567418\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"ddd3300fd0cdc032c7fe210233500e41\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1893E9B093FE8CA0\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17015\r\nx-ratelimit-remaining: 17015\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 13 Feb 2027 20:53:43 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6b8p61JqdCB9pA99sGnfQXK8TJJleNBhymAh21Pivz6BUuZqHLCMTSDGJHQci1KM8LXx4BQUdMFi1PKvFkBOZGOU3bIfcAJeJBJf8vlKl0%3D\"}]}\r\ncf-ray: 9cd737801def0a20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"ddd3300fd0cdc032c7fe210233500e41","sha1":"0a86c95eed9f9a129677173ef48c0299de7f6d22","sha256":"d8d58def8a36beabdfb52be4aee026224ad1a028c3df6ccc58b34f77f4828504","sha512":"644bae34f26adbd90dd5aa577505702c35c5e2ee2252546570070e0a2662995d715d1d70f28c960cc538edc190a6ba505aadbe88f42277d90ab4506c29e164e0","ssdeep":"12288:kLQFxrTfV8U4/Aj4UT9Em88/n2LjiiycNThDOJjXLKGtOHmthlhYg+Uenl:EQnrLbj4o9w80iXgOtR4YQl","tlshash":"30c42320b53ebb12ce0c1a091d6861d1b365a161c7501c4d5b2fb2a9fc2b9316badbfc","first_seen":"2026-01-30T07:25:16.025088Z","last_seen":"2026-03-15T20:04:55.052673Z","times_seen":170,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":103,"dns":3,"connect":11,"send":0,"wait":56,"receive":193,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auras.cfd/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"auras.cfd","domain":"auras.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auras.cfd/","date":"2026-02-13T20:53:40.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auras.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:41:09 GMT","end":"Sun, 03 May 2026 22:41:01 GMT"},"fingerprint":{"sha1":"12:32:64:EB:3F:4F:AD:95:5E:31:FE:57:88:21:BD:0F:36:F7:78:C9","sha256":"50:2C:62:D8:AB:9E:97:EE:A9:68:79:E0:73:CE:A0:B7:92:4E:91:A3:AB:76:0C:18:02:AB:51:B8:31:6F:F0:01"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: auras.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auras.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:53:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\npriority: u=3,i=?0\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Sat, 13 Feb 2027 20:53:40 GMT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 18:09:59 GMT\r\netag: W/\"bd30-19c583204d8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGCprGXP3kD8ZbHD6VnYoaSYR%2FNFKs2%2FQSGlMH7XgzxTFoz%2BCtm0jVqQPKoAXCfm7RN5MqyIkcCz4Gf8duPFhscj3clHYeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7376e7a5709b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-06-07T08:09:16.321809Z","times_seen":63907,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auras.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}