{"report_id":"d21d5757-521c-42e8-b579-a4eef48f5a96","version":6,"status":"done","tags":[],"date":"2025-09-10T15:02:47Z","url":{"schema":"http","addr":"leveluplabsedu.live","fqdn":"leveluplabsedu.live","domain":"leveluplabsedu.live","tld":"live"},"ip":{"addr":"3.146.153.124","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"leveluplabsedu.live/","fqdn":"leveluplabsedu.live","domain":"leveluplabsedu.live","tld":"live"},"title":"Document"},"submit":{"url":{"schema":"http","addr":"leveluplabsedu.live","fqdn":"leveluplabsedu.live","domain":"leveluplabsedu.live","tld":"live"},"ip":{"addr":"3.146.153.124","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-15T15:02:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-10T15:02:28Z","timestamp":1757516548,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.9","port":56844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-10T15:02:28.417239+0000\",\"flow_id\":1862931626701215,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":56844,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"www.diomdes1212.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":474,\"bytes_toclient\":116,\"start\":\"2025-09-10T14:57:29.307615+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"leveluplabsedu.live","ip":{"addr":"3.146.153.124","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-10T15:02:47.510412Z","last_seen":"2025-09-10T15:02:47.510412Z","alert_count":0,"request_count":2,"received_data":7027,"sent_data":1658,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.dribbble.com","ip":{"addr":"3.167.2.97","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-03-19","domain_rank":463869,"first_seen":"2017-04-03T12:44:06Z","last_seen":"2025-09-08T19:00:05.67942Z","alert_count":0,"request_count":1,"received_data":1374493,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-03T15:11:16.573868Z","alert_count":0,"request_count":1,"received_data":18103,"sent_data":532,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-03T15:20:50.935949Z","alert_count":0,"request_count":1,"received_data":122205,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":1058,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-10T15:02:28Z","timestamp":1757516548,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.9","port":56844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-10T15:02:28.417239+0000\",\"flow_id\":1862931626701215,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":56844,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"www.diomdes1212.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":474,\"bytes_toclient\":116,\"start\":\"2025-09-10T14:57:29.307615+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leveluplabsedu.live/","date":"2025-09-10T15:02:26.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leveluplabsedu.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Sep 2025 15:02:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 16149\r\ncf-ray: 97cfce6cbd3b56c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04010-1d970\"\r\nlast-modified: Mon, 04 May 2020 16:17:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 78460\r\nexpires: Mon, 31 Aug 2026 15:02:26 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dysUUiKcrnB7qR6z617DuB6W%2F9I1YuKHNTW9Uls%2FccOzwYOEKindFyigT5lhkIwJPFDBlG95G6E5CSSBvw6thHK9BnTQih1TZZ4klyCBbPMmEo3IMDrvwMtCnram%2B8O7TUPrV%2FED\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-05T11:54:25.90909Z","times_seen":56344,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":15,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Arvo","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leveluplabsedu.live/","date":"2025-09-10T15:02:26.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css?family=Arvo HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leveluplabsedu.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 10 Sep 2025 15:02:26 GMT\r\ndate: Wed, 10 Sep 2025 15:02:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":372,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6e81b337c9c36c58c53f290b33a4e629","sha1":"73b7389d564cfcb5eec0af88e48e8aa76d7a68b0","sha256":"8a56edf63bbf133e9f437a13a1e4b869d6547cb9ec50dbbc50fa54630249e8b1","sha512":"ef43ffa7497a13a59151fada1564336e948a9d1b1f70935b47f8e7accd0fb071956763e23c56921aad348ceed25c7bc622239f1e3d59d79f9508480401ed4399","ssdeep":"","tlshash":"89e0c041082ab500e7930cc112de3931df0fe0406444de35eafe18d8bc51c669352b1c","first_seen":"2025-06-10T19:30:16.038062Z","last_seen":"2026-04-05T10:17:33.438846Z","times_seen":390,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":131,"dns":4,"connect":27,"send":0,"wait":47,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leveluplabsedu.live/favicon.ico","fqdn":"leveluplabsedu.live","domain":"leveluplabsedu.live","tld":"live"},"ip":{"addr":"3.146.153.124","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leveluplabsedu.live/","date":"2025-09-10T15:02:26.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leveluplabsedu.live","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 06 Sep 2025 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:C1:C3:4E:69:1F:4C:C9:5D:36:39:D5:8E:1E:32:78:A7:AC:E0:09","sha256":"20:6E:AB:29:95:78:6F:42:8A:C0:F6:93:0A:0A:1E:1E:F4:C1:97:7E:E0:DF:0E:57:67:0A:6D:42:56:C0:C2:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leveluplabsedu.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leveluplabsedu.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InF4d1pDRUJqb1h0SmZmdlJQL2pRSGc9PSIsInZhbHVlIjoiMVVvamZTc0lGZ1V3SjBzWXF4VEVYK2hQUERvOHRkMExyY1dmc1ZqakxxZVFRSHl4b1dveG5BNm9jOVE2OGI1OHl6Mm5VaHI1TFBuWWx5R0kvUFNQcUNDYVFFZzJBTlVoZllqNDFJOUJKelpDSE51Qld5MVJmTHJMVkozdTdjQVAiLCJtYWMiOiJkYTc0ZDg1MGUwOGQ0ZjJmZmU5MDZmYjkzMGZjZWE2YjQ4NjliYmY2ZWE0NTRkZDI5ZThkNjc4ZGJlMTFkMjRjIiwidGFnIjoiIn0%3D; searchyin_session=eyJpdiI6ImlTU0VvNE0xWExINUttNlVVdlQ4Z2c9PSIsInZhbHVlIjoic1JjL2dKaE94eEVQOHJ4SVdITW51VHRkWDd6eVBnNzVuY2RXTXBrT2VUajdCT1dRZENCNUNqQVFSNTkxQS9BSHdKbTAyNmUzTEZ1cnBCZWh4VXBaanJ4eW5YWXZjVkptMVAyYklZWmthMCt0dWZMTlZ5Z2tJYnQ3VTJuUkV0dlkiLCJtYWMiOiJmYWY4Y2E0NzFlZGI5ZjMzOWZjOWYxODdlOTkyNzEyMjdhN2Y5YzM2NzZmNDE3MTc2ZDk4NDQ2MWQ2YTQ3OGUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 10 Sep 2025 15:02:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nCache-Control: no-cache, private\r\nVary: Accept-Encoding, X-Inertia\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ill1ZnVBSkdFd1N6YWFGZUFkOEg3NkE9PSIsInZhbHVlIjoiQjF6SUoxb3U4eUdxV0RsYmt5a0VZVHZoMUdrZWk4ME92WEx2cVhUOGVTRGZiN2g1eWFKd2IydnF2Y2M0VU1DaEtQS1ljMWNWVGl2dE80b25oNXBwcU1yUjJzMGp3dVhUYWZYellUV0dsOEFoQWNvZEVmSGRldWIxNGFnd3J6eG0iLCJtYWMiOiJhZmVlNDhiNzhhZjM5OWRlNjQwZGNlNjkwYTM2ZWYxYjE1OGQ3NDRhODI5OTVmM2I3YzZmNzI2ZmNkMmQ0MDQ2IiwidGFnIjoiIn0%3D; expires=Fri, 10-Oct-2025 15:02:26 GMT; Max-Age=2592000; path=/\nsearchyin_session=eyJpdiI6IlVOZGxHTnZlbXc3T2lKbE93SGVzYnc9PSIsInZhbHVlIjoiRGNJbXFvSVhRUUFJczMwRGdac2c0TUFKdGZjeUl4ekhpbzlMNmR6SjFSY1FzNjBHcEkxV0I2OUZHVnNESEtNaklWbmtTOUFOV0pVZ2lLa3lPZ01aNFM2Slc2NlRQS2xiY2VoNmZiY1VDb09EcmVMdzhtSkJUaXA4czBMMVlFNkwiLCJtYWMiOiJjMmVhNDc5YWRjOWVmODJlMzRiZGE0ZGY0Yzk4ZGUzYjBiYzRiMjJkZWQ0YzNhMWYxNzA2MjQ5NWRmOGNlODkyIiwidGFnIjoiIn0%3D; expires=Fri, 10-Oct-2025 15:02:26 GMT; Max-Age=2592000; path=/; httponly\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"779ad6166cff82042f95c94c80daa202","sha1":"2cf7b45f57a5e9d63c42a7d6c58be9335ec5afb2","sha256":"b022af0cd335d616c13c3166263e2182cb3b9767d962dd5e1da5eed113ec77a7","sha512":"154348954568bb0d80f82a492e8dfdddd0cc4206786c770745d017a83b577cd54243789a56234f5c46745b892318abc8e1080e98d490b15a8c92e017c46bcc1c","ssdeep":"","tlshash":"2241ed9340f25016300398952fe563465f95d807c60bca197afd67e5efc6c9bc8d3a1c","first_seen":"2025-09-10T15:02:51.996587Z","last_seen":"2025-10-12T19:37:14.297237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dribbble.com/users/285475/screenshots/2083086/dribbble_1.gif","fqdn":"cdn.dribbble.com","domain":"dribbble.com","tld":"com"},"ip":{"addr":"3.167.2.97","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leveluplabsedu.live/","date":"2025-09-10T15:02:26.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dribbble.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"ED:5F:90:E1:D7:72:E4:25:25:0D:F0:62:E0:FA:B4:9B:E1:E1:87:56","sha256":"8E:09:06:A6:8F:6B:2D:A4:BD:4F:6B:BB:47:6D:FB:3D:C0:AA:1E:8D:4C:07:E0:0F:5D:DF:23:D5:84:65:9D:1D"}}},"request":{"raw":"GET /users/285475/screenshots/2083086/dribbble_1.gif HTTP/1.1\r\nHost: cdn.dribbble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leveluplabsedu.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 1373645\r\ndate: Thu, 09 Jan 2025 16:16:52 GMT\r\nlast-modified: Thu, 28 May 2015 15:21:39 GMT\r\netag: \"e430101033efff9a294eaafecbac846a\"\r\nx-amz-storage-class: STANDARD_IA\r\ncache-control: max-age=315576000\r\nexpires: Wed, 28 May 2025 14:00:13 GMT\r\nx-amz-version-id: P9hxB7tyd4Ch839iBBxh8yD4BWnTGn8Y\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: xsVNfW4572cdUw3gnVzHqbWvbbCw5m0eLSpo8Gee2VhU9fmqmERbnQ==\r\nage: 21077134\r\nx-xss-protection: 1\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nallow: OPTIONS, GET, HEAD, POST\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1373645,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"6264728f4ad92ab1e59bff397b11c706","sha1":"eef104da415d61199458039d15042d49906e8210","sha256":"4699d998430d90d5c2ead93b64c89940f5ae73ce821edfcda7d660c710c9e5c7","sha512":"cfea0c663eaa8c28786fc289687a3aaa7849216d238deed9ef03e7be12cc814a07bd3ff27b8c35f745eb98b9c4777751e3c59d98c7fabf55d1af72bfc370c438","ssdeep":"24576:c7U/O0ckNi61iXdRtxBI+Ma2b7Aw9QuXaJPs2qvEJ3iVnQ7I:c7Mq6adRtxCVbb7FxX6kT9VII","tlshash":"2925223f46780138763740ec39ae4ee958beccb96bd0077b5e3f2199515852ca52ccba","first_seen":"2024-07-21T07:50:41Z","last_seen":"2026-04-03T17:12:48.601329Z","times_seen":80,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":74,"dns":64,"connect":1,"send":0,"wait":5,"receive":59,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arvo/v23/tDbD2oWUg0MKqScQ7Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leveluplabsedu.live/","date":"2025-09-10T15:02:26.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/arvo/v23/tDbD2oWUg0MKqScQ7Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leveluplabsedu.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17268\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Sep 2025 22:55:09 GMT\r\nexpires: Tue, 08 Sep 2026 22:55:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 144437\r\nlast-modified: Mon, 02 Jun 2025 16:44:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17268, version 1.0","md5":"0373e3f7dcf2fae4582c84ac30e0e9ee","sha1":"5b358bb8675919d1f883be426ac355ea931eaaa1","sha256":"b4eb4284188dcd4a4643d900bbe50b2d6b336afeb7c126eace219276b5d30521","sha512":"a82a24532a338bfbd224a9fccce64d32c93d3eb9d505b2061abd63e2218c741555f903a3db412b143722b79c63f43a1b4aa610fccd6f885383636adf8264611c","ssdeep":"384:8kujbosS65pL9f73hpZ7VI4Y1FNEMnHZOCGfbCzNX:Tyos3j5FJIF95ef2zNX","tlshash":"dd72dff4ec99b154ccbf067384aaff2c9ecd1afe2ca55fc54c24285102979928353c99","first_seen":"2025-06-04T01:47:48.66017Z","last_seen":"2026-04-05T11:34:04.398162Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":132,"dns":1,"connect":15,"send":0,"wait":15,"receive":4,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leveluplabsedu.live/","fqdn":"leveluplabsedu.live","domain":"leveluplabsedu.live","tld":"live"},"ip":{"addr":"3.146.153.124","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-10T15:02:24.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leveluplabsedu.live","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 06 Sep 2025 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:C1:C3:4E:69:1F:4C:C9:5D:36:39:D5:8E:1E:32:78:A7:AC:E0:09","sha256":"20:6E:AB:29:95:78:6F:42:8A:C0:F6:93:0A:0A:1E:1E:F4:C1:97:7E:E0:DF:0E:57:67:0A:6D:42:56:C0:C2:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: leveluplabsedu.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 10 Sep 2025 15:02:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nCache-Control: no-cache, private\r\nVary: Accept-Encoding, X-Inertia\r\nX-RateLimit-Limit: 60\r\nX-RateLimit-Remaining: 59\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6InF4d1pDRUJqb1h0SmZmdlJQL2pRSGc9PSIsInZhbHVlIjoiMVVvamZTc0lGZ1V3SjBzWXF4VEVYK2hQUERvOHRkMExyY1dmc1ZqakxxZVFRSHl4b1dveG5BNm9jOVE2OGI1OHl6Mm5VaHI1TFBuWWx5R0kvUFNQcUNDYVFFZzJBTlVoZllqNDFJOUJKelpDSE51Qld5MVJmTHJMVkozdTdjQVAiLCJtYWMiOiJkYTc0ZDg1MGUwOGQ0ZjJmZmU5MDZmYjkzMGZjZWE2YjQ4NjliYmY2ZWE0NTRkZDI5ZThkNjc4ZGJlMTFkMjRjIiwidGFnIjoiIn0%3D; expires=Fri, 10-Oct-2025 15:02:25 GMT; Max-Age=2592000; path=/\nsearchyin_session=eyJpdiI6ImlTU0VvNE0xWExINUttNlVVdlQ4Z2c9PSIsInZhbHVlIjoic1JjL2dKaE94eEVQOHJ4SVdITW51VHRkWDd6eVBnNzVuY2RXTXBrT2VUajdCT1dRZENCNUNqQVFSNTkxQS9BSHdKbTAyNmUzTEZ1cnBCZWh4VXBaanJ4eW5YWXZjVkptMVAyYklZWmthMCt0dWZMTlZ5Z2tJYnQ3VTJuUkV0dlkiLCJtYWMiOiJmYWY4Y2E0NzFlZGI5ZjMzOWZjOWYxODdlOTkyNzEyMjdhN2Y5YzM2NzZmNDE3MTc2ZDk4NDQ2MWQ2YTQ3OGUxIiwidGFnIjoiIn0%3D; expires=Fri, 10-Oct-2025 15:02:25 GMT; Max-Age=2592000; path=/; httponly\r\nX-XSS-Protection: 1; mode=block, 1; mode=block\r\nX-Content-Type-Options: nosniff, nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"779ad6166cff82042f95c94c80daa202","sha1":"2cf7b45f57a5e9d63c42a7d6c58be9335ec5afb2","sha256":"b022af0cd335d616c13c3166263e2182cb3b9767d962dd5e1da5eed113ec77a7","sha512":"154348954568bb0d80f82a492e8dfdddd0cc4206786c770745d017a83b577cd54243789a56234f5c46745b892318abc8e1080e98d490b15a8c92e017c46bcc1c","ssdeep":"","tlshash":"2241ed9340f25016300398952fe563465f95d807c60bca197afd67e5efc6c9bc8d3a1c","first_seen":"2025-09-10T15:02:51.996587Z","last_seen":"2025-10-12T19:37:14.297237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":497,"dns":21,"connect":109,"send":0,"wait":308,"receive":0,"ssl":364},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}