{"report_id":"d2931c0f-03c0-492a-ad8c-817d1c686c1a","version":0,"status":"done","tags":[],"date":"2026-08-28T14:08:08Z","url":{"schema":"http","addr":"rabbitx-io.divhunt.website/","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"ip":{"addr":"49.13.147.235","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"rabbitx-io.divhunt.website/","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"title":"RabbitX®｜Decentralised Exchange","dom":{"size":10343,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4020)","md5":"4fb85df58a7164d367714213a9ca1529","sha1":"e5b9c68048c8db4e85565154796e2984fc44ff79","sha256":"2048fa733fb5056b362e35f514eff0a1556d411aa42386f9e0bd3c87b020d274","sha512":"5ac923736f886e5e898c259fff023bb6aec9117af00df37d63e9477c4c36e5cba8a23e012f424e1522c2c7b2cf0266983b0217a1e24883b93d3822f4e007283e","ssdeep":"192:zFKtQnhpQWIFsNu6kKOlPTuu9MBgxuj/6B6zsFL+d:zIunhpQ3FsHDOpTuIQj/6BSQm","tlshash":"4f22e96758984c7a83c642a5e9a17cc8daac104fe5494c74b8dc8d8c2be27f4457376f","dom_hash":"domhasha7bdece71eec7150e078332fd6d3585d","first_seen":"2026-08-28T14:08:11.034851Z","last_seen":"2026-08-28T14:08:11.034851Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rabbitx-io.divhunt.website/","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"ip":{"addr":"49.13.147.235","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:08:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rabbitx-io.divhunt.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"global.divhunt.com","ip":{"addr":"5.161.250.149","port":443,"asn":213230,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"domain_registered":"2019-04-19","domain_rank":5349372,"first_seen":"2022-11-13T01:59:37Z","last_seen":"2026-08-28T13:28:39.582906Z","alert_count":0,"request_count":4,"received_data":198075,"sent_data":2230,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":2,"received_data":98690,"sent_data":1170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rabbitx-io.divhunt.website","ip":{"addr":"49.13.147.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-08-08","domain_rank":0,"first_seen":"2026-08-28T13:28:38.742728Z","last_seen":"2026-08-28T13:28:38.742728Z","alert_count":3,"request_count":3,"received_data":657757,"sent_data":1484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Divhunt","description":"Divhunt is an SPA builder.","website":"https://www.divhunt.com","common_platform_enumeration":"","icon":"Divhunt.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"divhunt-site.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2023-12-09T16:44:00Z","last_seen":"2026-08-28T13:28:39.580344Z","alert_count":0,"request_count":4,"received_data":101317,"sent_data":2000,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":23427,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/jQuery.js","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d1d18d2d1724928654b0e34c98c4633","sha1":"0c4bd218a19c944ff9071dce25975b3076eb99d4","sha256":"7d00bc067a02295551266eab922aba57fbe28fa953b00c571e3d804163df1b45","sha512":"5606a632d3e9aed17f9da20958aa9af3221df168f2de19af7cab1accf1a2054bf63f7d94e160d7c9c1aaea37d67464cee047bab4118ae0b94d473067ce95d508","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQA:EcqmCU3zhINzfmR4lb3e34UQ47GKb","tlshash":"d19308ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","size":89857,"data":"","first_seen":"2023-03-14T13:03:28Z","last_seen":"2026-08-28T14:08:11.041059Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabbitx-io.divhunt.website/assets/visitor-js?v=1787926059.2466","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"ip":{"addr":"49.13.147.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"287714191df043e7f965dda6b465aa9f","sha1":"155c2ad6b8fe3a58acc5150f7fd76a972f0642db","sha256":"089c26757a2b74472d969e65da4894a980b45c5b2e066b1cb4f3b3036a699a51","sha512":"2564275013b12825a83ed919837319008fc83be4a090124f2d446c09936b2ba1b2a49c4bca18e8cb88cd9a92218c87bf960d7ae65c1131d1b1ff25a225db9978","ssdeep":"1536:qkd/MRnvdUCPt/n1FE1+FssJAIa5iEpzaFaqLLF6Qe0VtwF261wp9+TLelxC0me7:kRCK1CixFDBDhJKt2zwkmtemltw3iCF","tlshash":"23c495b935f6212046b3717d5fdf81047635800b898a9c68bf5c46906f88b2daef27ed","size":594048,"data":"","first_seen":"2026-08-28T13:28:41.703482Z","last_seen":"2026-08-28T14:08:11.043814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/w/26830/65111/core.js","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"11a9518d9ba9023385e5527bffb198df","sha1":"ba74cb58288566381b978918396e60de75ea74fb","sha256":"80653ae543c0fa6b0663a6aa361cf73abe25c8fce2b32c7214947a0f7b6cf175","sha512":"f0aa60b3957c042f4617d16723bf7ed61264c98c304db7e8883993cf4e23bd3af0c1159f71e932a9b16432c4c92d1d3e26549d8eac27069f8493672000933952","ssdeep":"","tlshash":"74d05b6d1961c73941445555a1723d0689d4c6a6d137b428074b4cad33ee18a507fd94","size":266,"data":"","first_seen":"2026-08-28T13:28:41.710653Z","last_seen":"2026-08-28T14:08:11.048587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/w/26830/65111/2.js","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bc395e6e766c84fdd64712dd69833b0","sha1":"f35753f2fa7ac8d77b16ed0e367736e13ee35d89","sha256":"f2c07a13ecd8a4aaae10f45e3a583912b00e3e8d29969df7c00a8c13aef0ce2e","sha512":"0a25ec63e6070544c1bba65c1cdd5de7c99aaadd7f6ad0a1bb5ab2a35b8a89d296eb6b91633bd0d1e9e7ce6069527390c7336599905a23c36624a73df567ebde","ssdeep":"","tlshash":"1b6144afe860dde2c3c11addb27a3c7a98c2548586d1467c02f6da0f42f51f1d271967","size":3383,"data":"","first_seen":"2026-08-28T13:28:41.704941Z","last_seen":"2026-08-28T14:08:11.045439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.divhunt.com/assets/library/Gsap26.js","fqdn":"global.divhunt.com","domain":"divhunt.com","tld":"com"},"ip":{"addr":"5.161.250.149","port":443,"asn":213230,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f94d3874a2991a74d8a61202a64db456","sha1":"4712b2665337d389fdf9d2a724a0d2db17808ace","sha256":"839c6b36d248471124fbada2a33897753b86e1ca192ec0517587a16dcdf67056","sha512":"1ce78ff4662dd2b8a4327689c8f1146323080be3942b4af11a2446b35534071b17c3f22ef4f60687daf3ce990a686a81fbcd6ce601f6cde4d6ea4d6a6cbeffe5","ssdeep":"1536:8ha1HvGRpXaDTX+Iq2CpsvO3dyL4NZEkcIRy5ybQm4FOIyAhS3GG2WXiTziGFXZJ:71Heaujpc5EKjI+y0m4geS3H2zXi6pJ","tlshash":"a6c318c93241b032539b62b5547f060bb337a8a8680f4518f269e4dd3d7c9ad427be7e","size":124013,"data":"","first_seen":"2026-08-28T13:28:41.713422Z","last_seen":"2026-08-28T14:08:11.046984Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"LOAD PAGEmap[actor:server1.conn0.watcher16.process8//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[page:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] settings:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://rabbitx-io.divhunt.website/assets/visitor-js?v=1787926059.2466","line_number":11611,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"rabbitx-io.divhunt.website/","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"ip":{"addr":"49.13.147.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:07:39.028Z","timestamp":1787926059028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.divhunt.website","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:38:27 GMT","end":"Sat, 17 Oct 2026 23:38:26 GMT"},"fingerprint":{"sha1":"B8:12:37:72:56:1B:89:34:AC:0B:9E:32:6D:7B:79:35:F3:8F:8D:5C","sha256":"55:1B:41:FC:9C:F6:FD:44:22:96:E8:C4:20:CE:D9:47:37:8F:3F:12:51:B0:4D:0D:1C:D4:69:DE:16:DF:A3:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rabbitx-io.divhunt.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-region: EU\r\nx-city: Nuremberg\r\nx-pool: 2\r\nx-xss-protection: 1; mode-block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-prerender: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Divhunt","description":"Divhunt is an SPA builder.","website":"https://www.divhunt.com","common_platform_enumeration":"","icon":"Divhunt.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7882,"size_decoded":3126,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4020)","md5":"9de7b7805670f507c3fe2c2de04052bd","sha1":"9ec5eda9f514796bf1082f78c502b10ba97b6afd","sha256":"091a892882cf8d01cc0db9eafc2db6225b38c5e1c572e1f8caa19b6b878fb163","sha512":"45fee10c0cf3764d9d90f7df331dc1a75cfc3e00b289df3acbdd64a76dd053ef76fab3c1160d04bc320d9c3c6294d1015c094f0d66b404eaa6eac2ec9427bdfb","ssdeep":"96:FFKvQQ0117hhRl6RIAKpSBgld8M7u27shyqfh0BzGun0kkcFqV0+8Ur:FFKvQfhRQRIlMBgxuj/6B6zsFL+L","tlshash":"acf1656728984c3f838552b1ade17c88ebec105fe5580c64b89cce8c1fe67f446b3666","first_seen":"2026-08-28T14:08:11.038703Z","last_seen":"2026-08-28T14:08:11.038703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":39,"connect":32,"send":0,"wait":62,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rabbitx-io.divhunt.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/jQuery.js","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.637Z","timestamp":1787926059637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /jQuery.js HTTP/1.1\r\nHost: divhunt-site.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1544582\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"64cc1fca-15f01\"\r\nlast-modified: Thu, 03 Aug 2023 21:44:42 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:14:43\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7917445c3e3ee7abafc42c1a27529fe1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":89857,"size_decoded":35202,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d1d18d2d1724928654b0e34c98c4633","sha1":"0c4bd218a19c944ff9071dce25975b3076eb99d4","sha256":"7d00bc067a02295551266eab922aba57fbe28fa953b00c571e3d804163df1b45","sha512":"5606a632d3e9aed17f9da20958aa9af3221df168f2de19af7cab1accf1a2054bf63f7d94e160d7c9c1aaea37d67464cee047bab4118ae0b94d473067ce95d508","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQA:EcqmCU3zhINzfmR4lb3e34UQ47GKb","tlshash":"d19308ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","first_seen":"2023-03-14T13:03:28Z","last_seen":"2026-08-28T14:08:11.041059Z","times_seen":198,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":3,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/w/26830/65111/core.css","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.638Z","timestamp":1787926059638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /w/26830/65111/core.css HTTP/1.1\r\nHost: divhunt-site.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1544582\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6843cd91-fa7\"\r\nlast-modified: Sat, 07 Jun 2025 05:26:41 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7ce63960fe65a6d4afaff8b0f89b998b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4007,"size_decoded":1930,"mime_type":"text/css","magic":"ASCII text, with very long lines (4007), with no line terminators","md5":"3e4fffbeea02cd7679e86f19b68282ca","sha1":"df130e8b5ea260c0480fd29e9c11550f3f77ce41","sha256":"36dfcfbcb04d0f133bac0f080bf7c20f8ff9b5e311079278d2621e7753d5bfc8","sha512":"f1172b47e376218a4117fa57d87d0a2730e3bab0446ddb20db67f20d826edf770e34e85c48b590815526243d4d647ae124ee2aa3ed57eae69b85d96732eab93c","ssdeep":"","tlshash":"b181c7236e00210b902ae48ff8c2829b71366487a6976bdacd304757ce8b5f70e35f4d","first_seen":"2026-08-28T13:28:41.707493Z","last_seen":"2026-08-28T14:08:11.041814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":2,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.673Z","timestamp":1787926059673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 14:07:39 GMT\r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22743,"size_decoded":1639,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"03d386d3d51356518f1c932bd7d1f021","sha1":"f20bdaa14bb1dba0ae6b28e1c455976bcc6e0081","sha256":"e833d17f31411e640714d4c41bd3d264b7c2b48b4740ce7ea6d7988f50e58d69","sha512":"dcbd99af933cbe40c84ba846643ac9e9e5b070e391a04d2d608a0f89f470b31aea8bee06ba7048fb2e7140eaeb75ce1c990d32444736469826bee4c96ffb2dc5","ssdeep":"192:WpNmp9pKpO3tp3pxYp5NnWjO3GAxRKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NP:WLmXoKtZIB1OKYXuM0p2+g7GQK","tlshash":"d5a28992002ba400ab971dc233cf7f3aaece10856085d1b96ffd0dc59cead66436876d","first_seen":"2025-09-10T18:54:49.359958Z","last_seen":"2026-08-29T17:22:25.849942Z","times_seen":9735,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabbitx-io.divhunt.website/assets/visitor-js?v=1787926059.2466","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"ip":{"addr":"49.13.147.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.676Z","timestamp":1787926059676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.divhunt.website","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:38:27 GMT","end":"Sat, 17 Oct 2026 23:38:26 GMT"},"fingerprint":{"sha1":"B8:12:37:72:56:1B:89:34:AC:0B:9E:32:6D:7B:79:35:F3:8F:8D:5C","sha256":"55:1B:41:FC:9C:F6:FD:44:22:96:E8:C4:20:CE:D9:47:37:8F:3F:12:51:B0:4D:0D:1C:D4:69:DE:16:DF:A3:B7"}}},"request":{"raw":"GET /assets/visitor-js?v=1787926059.2466 HTTP/1.1\r\nHost: rabbitx-io.divhunt.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: application/javascript\r\nx-region: EU\r\nx-city: Nuremberg\r\nx-pool: 2\r\nx-xss-protection: 1; mode-block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-prerender: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594048,"size_decoded":594422,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4211)","md5":"287714191df043e7f965dda6b465aa9f","sha1":"155c2ad6b8fe3a58acc5150f7fd76a972f0642db","sha256":"089c26757a2b74472d969e65da4894a980b45c5b2e066b1cb4f3b3036a699a51","sha512":"2564275013b12825a83ed919837319008fc83be4a090124f2d446c09936b2ba1b2a49c4bca18e8cb88cd9a92218c87bf960d7ae65c1131d1b1ff25a225db9978","ssdeep":"1536:qkd/MRnvdUCPt/n1FE1+FssJAIa5iEpzaFaqLLF6Qe0VtwF261wp9+TLelxC0me7:kRCK1CixFDBDhJKt2zwkmtemltw3iCF","tlshash":"23c495b935f6212046b3717d5fdf81047635800b898a9c68bf5c46906f88b2daef27ed","first_seen":"2026-08-28T13:28:41.703482Z","last_seen":"2026-08-28T14:08:11.043814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rabbitx-io.divhunt.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/w/26830/65111/2.js","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.679Z","timestamp":1787926059679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /w/26830/65111/2.js HTTP/1.1\r\nHost: divhunt-site.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1544582\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6843cd91-d37\"\r\nlast-modified: Sat, 07 Jun 2025 05:26:41 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c22bcd28578162aabff1c2e7c931d35c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3383,"size_decoded":2258,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (3383), with no line terminators","md5":"1bc395e6e766c84fdd64712dd69833b0","sha1":"f35753f2fa7ac8d77b16ed0e367736e13ee35d89","sha256":"f2c07a13ecd8a4aaae10f45e3a583912b00e3e8d29969df7c00a8c13aef0ce2e","sha512":"0a25ec63e6070544c1bba65c1cdd5de7c99aaadd7f6ad0a1bb5ab2a35b8a89d296eb6b91633bd0d1e9e7ce6069527390c7336599905a23c36624a73df567ebde","ssdeep":"","tlshash":"1b6144afe860dde2c3c11addb27a3c7a98c2548586d1467c02f6da0f42f51f1d271967","first_seen":"2026-08-28T13:28:41.704941Z","last_seen":"2026-08-28T14:08:11.045439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.divhunt.com/d62b55cdb707d16aeaabfe2cfa8bb46c_497.svg","fqdn":"global.divhunt.com","domain":"divhunt.com","tld":"com"},"ip":{"addr":"5.161.250.149","port":443,"asn":213230,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:40.080Z","timestamp":1787926060080,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"global.divhunt.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 19:51:11 GMT","end":"Wed, 25 Nov 2026 19:51:10 GMT"},"fingerprint":{"sha1":"F0:FB:D2:0F:75:20:0B:27:8B:B0:79:0C:9B:71:0F:C4:72:6F:21:32","sha256":"13:F2:1C:6F:90:DA:56:D2:02:52:59:DF:16:63:E3:87:9D:D3:B6:36:A9:2F:91:DE:3E:93:48:16:AA:AF:7C:1E"}}},"request":{"raw":"GET /d62b55cdb707d16aeaabfe2cfa8bb46c_497.svg HTTP/1.1\r\nHost: global.divhunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 28 Aug 2026 14:07:40 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCDN-PullZone: 1021291\r\nCDN-RequestCountryCode: US\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nCache-Control: public, max-age=31919000\r\nContent-Encoding: zstd\r\nETag: \"67ba6627-1f1\"\r\nLast-Modified: Sun, 23 Feb 2025 00:04:55 GMT\r\nCDN-StorageServer: NY-703\r\nCDN-FileServer: 388\r\nCDN-ProxyVer: 1.34\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 08/25/2025 14:13:29\r\nCDN-EdgeStorageId: 1310\r\nCDN-RequestId: cda066b38ffce15e6e5b6a0690ae966e\r\nCDN-Cache: HIT\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":497,"size_decoded":1329,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d62b55cdb707d16aeaabfe2cfa8bb46c","sha1":"19850775449c98119d520a9bd218f0f562a29f22","sha256":"45562a51ceccd8da3a5f6c8d7fe5ca4570e6138a740f0b4e5f207632fb6358a8","sha512":"108220a88d0604957014cae1aaeda9971b7cc9978f8ae10ead8f3145880861f36d3889dfb03d0f87dfc67eff9fac47fa9637f55177fda3d417fc629e1faa388e","ssdeep":"","tlshash":"a4f0d492a5cccbe88d041341479c7c3c2057b0c79079c07876c49319afed9ab1c243ed","first_seen":"2025-06-01T11:02:01.304692Z","last_seen":"2026-08-28T14:08:11.046327Z","times_seen":7,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":0,"dns":0,"connect":101,"send":0,"wait":101,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.divhunt.com/assets/library/Gsap26.js","fqdn":"global.divhunt.com","domain":"divhunt.com","tld":"com"},"ip":{"addr":"5.161.250.149","port":443,"asn":213230,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:40.100Z","timestamp":1787926060100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"global.divhunt.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 19:51:11 GMT","end":"Wed, 25 Nov 2026 19:51:10 GMT"},"fingerprint":{"sha1":"F0:FB:D2:0F:75:20:0B:27:8B:B0:79:0C:9B:71:0F:C4:72:6F:21:32","sha256":"13:F2:1C:6F:90:DA:56:D2:02:52:59:DF:16:63:E3:87:9D:D3:B6:36:A9:2F:91:DE:3E:93:48:16:AA:AF:7C:1E"}}},"request":{"raw":"GET /assets/library/Gsap26.js HTTP/1.1\r\nHost: global.divhunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 28 Aug 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCDN-PullZone: 1021291\r\nCDN-RequestCountryCode: US\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=31919000\r\nContent-Encoding: zstd\r\nETag: \"6a45a597-1e46d\"\r\nLast-Modified: Wed, 01 Jul 2026 23:41:11 GMT\r\nCDN-StorageServer: NY-346\r\nCDN-FileServer: 1065\r\nCDN-ProxyVer: 1.58\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 08/08/2026 16:50:11\r\nCDN-EdgeStorageId: 925\r\nCDN-RequestId: fd662c2901e4ff91832a91156a439f26\r\nCDN-Cache: HIT\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124013,"size_decoded":53394,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65323)","md5":"f94d3874a2991a74d8a61202a64db456","sha1":"4712b2665337d389fdf9d2a724a0d2db17808ace","sha256":"839c6b36d248471124fbada2a33897753b86e1ca192ec0517587a16dcdf67056","sha512":"1ce78ff4662dd2b8a4327689c8f1146323080be3942b4af11a2446b35534071b17c3f22ef4f60687daf3ce990a686a81fbcd6ce601f6cde4d6ea4d6a6cbeffe5","ssdeep":"1536:8ha1HvGRpXaDTX+Iq2CpsvO3dyL4NZEkcIRy5ybQm4FOIyAhS3GG2WXiTziGFXZJ:71Heaujpc5EKjI+y0m4geS3H2zXi6pJ","tlshash":"a6c318c93241b032539b62b5547f060bb337a8a8680f4518f269e4dd3d7c9ad427be7e","first_seen":"2026-08-28T13:28:41.713422Z","last_seen":"2026-08-28T14:08:11.046984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":105,"send":0,"wait":210,"receive":105,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabbitx-io.divhunt.website/assets/visitor-css?v=1787926059.2466","fqdn":"rabbitx-io.divhunt.website","domain":"divhunt.website","tld":"website"},"ip":{"addr":"49.13.147.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.674Z","timestamp":1787926059674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.divhunt.website","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:38:27 GMT","end":"Sat, 17 Oct 2026 23:38:26 GMT"},"fingerprint":{"sha1":"B8:12:37:72:56:1B:89:34:AC:0B:9E:32:6D:7B:79:35:F3:8F:8D:5C","sha256":"55:1B:41:FC:9C:F6:FD:44:22:96:E8:C4:20:CE:D9:47:37:8F:3F:12:51:B0:4D:0D:1C:D4:69:DE:16:DF:A3:B7"}}},"request":{"raw":"GET /assets/visitor-css?v=1787926059.2466 HTTP/1.1\r\nHost: rabbitx-io.divhunt.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nx-region: EU\r\nx-city: Nuremberg\r\nx-pool: 2\r\nx-xss-protection: 1; mode-block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-prerender: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54679,"size_decoded":55053,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20864)","md5":"027ebfdef0cd297a88b56716681f372b","sha1":"33a44fe363c013cd241c03a42d3c17e20b9f44ba","sha256":"4647d593d966acfb46b930406ee8290bc1fdcc7725d8a9479fa94f232dbdb8c2","sha512":"f40e758f686835b8bd0abeac7fca2cf4607d86e6b88fc2e970fbde89582ab2a89585deaffe62cbd8f25465ea47c9c5943c2adb09b41c7535ca11000590440b93","ssdeep":"1536:7hHpfgoPxFcfGXrVsAWgaQGwCgaGyx42Ju4c6tExq37KsQ1wqmT6iKvZlQDcfHjy:d106iKpGs4r","tlshash":"5733a632b540627c742be26569d656de722cb402f7338ba8f9c1b631cac77e3097b548","first_seen":"2026-08-28T13:28:41.709247Z","last_seen":"2026-08-28T14:08:11.047722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rabbitx-io.divhunt.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divhunt-site.b-cdn.net/w/26830/65111/core.js","fqdn":"divhunt-site.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:39.678Z","timestamp":1787926059678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /w/26830/65111/core.js HTTP/1.1\r\nHost: divhunt-site.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 14:07:39 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1544582\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6843cd91-10a\"\r\nlast-modified: Sat, 07 Jun 2025 05:26:41 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e0d50f8fc6ea6e1c14b389c06406fb83\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":1126,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"11a9518d9ba9023385e5527bffb198df","sha1":"ba74cb58288566381b978918396e60de75ea74fb","sha256":"80653ae543c0fa6b0663a6aa361cf73abe25c8fce2b32c7214947a0f7b6cf175","sha512":"f0aa60b3957c042f4617d16723bf7ed61264c98c304db7e8883993cf4e23bd3af0c1159f71e932a9b16432c4c92d1d3e26549d8eac27069f8493672000933952","ssdeep":"","tlshash":"74d05b6d1961c73941445555a1723d0689d4c6a6d137b428074b4cad33ee18a507fd94","first_seen":"2026-08-28T13:28:41.710653Z","last_seen":"2026-08-28T14:08:11.048587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.divhunt.com/d62b55cdb707d16aeaabfe2cfa8bb46c_497.svg","fqdn":"global.divhunt.com","domain":"divhunt.com","tld":"com"},"ip":{"addr":"5.161.250.149","port":443,"asn":213230,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:40.079Z","timestamp":1787926060079,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"global.divhunt.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 19:51:11 GMT","end":"Wed, 25 Nov 2026 19:51:10 GMT"},"fingerprint":{"sha1":"F0:FB:D2:0F:75:20:0B:27:8B:B0:79:0C:9B:71:0F:C4:72:6F:21:32","sha256":"13:F2:1C:6F:90:DA:56:D2:02:52:59:DF:16:63:E3:87:9D:D3:B6:36:A9:2F:91:DE:3E:93:48:16:AA:AF:7C:1E"}}},"request":{"raw":"GET /d62b55cdb707d16aeaabfe2cfa8bb46c_497.svg HTTP/1.1\r\nHost: global.divhunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 28 Aug 2026 14:07:40 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCDN-PullZone: 1021291\r\nCDN-RequestCountryCode: US\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nCache-Control: public, max-age=31919000\r\nContent-Encoding: zstd\r\nETag: \"67ba6627-1f1\"\r\nLast-Modified: Sun, 23 Feb 2025 00:04:55 GMT\r\nCDN-StorageServer: NY-703\r\nCDN-FileServer: 388\r\nCDN-ProxyVer: 1.34\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 08/25/2025 14:13:29\r\nCDN-EdgeStorageId: 1310\r\nCDN-RequestId: cda066b38ffce15e6e5b6a0690ae966e\r\nCDN-Cache: HIT\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":497,"size_decoded":1329,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d62b55cdb707d16aeaabfe2cfa8bb46c","sha1":"19850775449c98119d520a9bd218f0f562a29f22","sha256":"45562a51ceccd8da3a5f6c8d7fe5ca4570e6138a740f0b4e5f207632fb6358a8","sha512":"108220a88d0604957014cae1aaeda9971b7cc9978f8ae10ead8f3145880861f36d3889dfb03d0f87dfc67eff9fac47fa9637f55177fda3d417fc629e1faa388e","ssdeep":"","tlshash":"a4f0d492a5cccbe88d041341479c7c3c2057b0c79079c07876c49319afed9ab1c243ed","first_seen":"2025-06-01T11:02:01.304692Z","last_seen":"2026-08-28T14:08:11.046327Z","times_seen":7,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":101,"send":0,"wait":101,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:40.114Z","timestamp":1787926060114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rabbitx-io.divhunt.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 185776\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-29T20:23:02.754225Z","times_seen":269362,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":16,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:40.116Z","timestamp":1787926060116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rabbitx-io.divhunt.website\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 185776\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-29T20:23:02.754225Z","times_seen":269362,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.divhunt.com/cc6da3daa4af4ad44ad50be09c1e5b1e_69406.jpeg","fqdn":"global.divhunt.com","domain":"divhunt.com","tld":"com"},"ip":{"addr":"5.161.250.149","port":443,"asn":213230,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rabbitx-io.divhunt.website/","date":"2026-08-28T14:07:40.119Z","timestamp":1787926060119,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"global.divhunt.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 19:51:11 GMT","end":"Wed, 25 Nov 2026 19:51:10 GMT"},"fingerprint":{"sha1":"F0:FB:D2:0F:75:20:0B:27:8B:B0:79:0C:9B:71:0F:C4:72:6F:21:32","sha256":"13:F2:1C:6F:90:DA:56:D2:02:52:59:DF:16:63:E3:87:9D:D3:B6:36:A9:2F:91:DE:3E:93:48:16:AA:AF:7C:1E"}}},"request":{"raw":"GET /cc6da3daa4af4ad44ad50be09c1e5b1e_69406.jpeg HTTP/1.1\r\nHost: global.divhunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rabbitx-io.divhunt.website/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 28 Aug 2026 14:07:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69406\r\nConnection: keep-alive\r\nCDN-PullZone: 1021291\r\nCDN-RequestCountryCode: US\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nCache-Control: public, max-age=31919000\r\nLast-Modified: Sat, 07 Jun 2025 05:12:56 GMT\r\nCDN-StorageServer: NY-346\r\nCDN-FileServer: 622\r\nCDN-ProxyVer: 1.58\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 206\r\nCDN-CachedAt: 07/31/2026 13:16:59\r\nCDN-EdgeStorageId: 1310\r\nCDN-RequestId: 8c03fd291f025b410835d9d5f16faea7\r\nCDN-Cache: HIT\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nX-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69406,"size_decoded":70352,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1348x637, components 3","md5":"cc6da3daa4af4ad44ad50be09c1e5b1e","sha1":"70ba014d5e705428d1037c6499f9257adfb64de4","sha256":"3a4e2032eae65ca71d5c998a0362684cc6658d5f254287ec1a862a973ee8d50e","sha512":"18a833e95095464f6ee67a039949a84dcc97e8db6ba631348acae62b8bc87a4f63179971acf81671c6045b7969154efe8acb5c264e60b10ed5cc737780bf1d19","ssdeep":"1536:fNR8iiwnI2soBVIVN7Olck+uRid5q8cufaj+:lR8iLsoBVINCV8cuiC","tlshash":"e36309039c0c8a93a52487a8fe074ead3f992a1dfc9636ff04664ddb3e616215d4d42f","first_seen":"2026-08-28T13:28:41.706048Z","last_seen":"2026-08-28T14:08:11.050053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":0,"dns":0,"connect":99,"send":0,"wait":197,"receive":104,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}