{"report_id":"d335387d-ac78-40f0-8034-bd4e02a05431","version":0,"status":"done","tags":[],"date":"2026-09-02T17:26:53Z","url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"104.21.88.211","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"title":"Shelby Testnet Airdrop – Official Shelby Deposit Portal \u0026 Claim","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T20:18:14.283985Z","times_seen":18241873,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"104.21.88.211","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T17:26:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"shelby.cam","ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T17:27:00.958485Z","last_seen":"2026-09-02T17:27:00.958485Z","alert_count":8,"request_count":8,"received_data":4623631,"sent_data":3902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"shelby.cam/runtime-3ip9b6xx48d.min.js","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6691c6426e1dd1b39e42c779017feb","sha1":"192f63783910a4806e64ae729c7b5475ada80660","sha256":"d965cca4172e59fb7c01b56be34a957f9d03da7b433cd86f13b171353b08232e","sha512":"2bdf42569e70a4cfa7a338c62e38da669cb03ec17eebf8d02e74286f0013c5a0b799c91197a08787281ef4b59f4245208bb0f9f301e9e3b213bd25d1108a6f8d","ssdeep":"1536:eY+WjZ8qrz7JnBvmhdB1QJrVSL+nsPPgVaU0d3WkuzysJ+9oNJKfbz3onH0o:eZWjx75BvGurxnndkGMc3d","tlshash":"0064dcd59a8a85a5be0611cdcc33ed05e0185d13fe6cf183aaecfdc17069f66805b36a","size":318502,"data":"","first_seen":"2026-09-02T17:27:06.246998Z","last_seen":"2026-09-02T17:27:06.246998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"87d42b083bab2ca9e0a115c86443db82","sha1":"b8bb95fc7e5140d9b11f8d33f936e6d43ea03b4b","sha256":"fcef10e892b25f210e5db330e61104cde3791c5c5f58678c96ec888971a43f32","sha512":"6a06b02d9315ddf41b038a2612ae0b945663df1361c2234447f3f82aa867764e8a1f33acdd70723bb63df935755ebc110ee362d23a1598f6531e10761c9fb90b","ssdeep":"49152:T7jcijV+wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtfZLS:f/2","tlshash":"16e523466c4754b6cf84536270eb5c0a55e80c23599ea0def798f8c1386efe2c0eb95e","size":3309951,"data":"","first_seen":"2026-09-02T17:03:45.950666Z","last_seen":"2026-09-02T17:27:06.25075Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-09-02T17:44:26.488811Z","times_seen":3572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-09-02T17:44:26.47986Z","times_seen":3533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-09-02T17:27:06.260595Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-09-02T17:27:06.262792Z","times_seen":1402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dacb5a034b50878be7f04c7bcf6733e9","sha1":"2046e20414f9cc98d8c6d0474664c689f405bf3e","sha256":"9673f6814ecca87e9c5efd932f3b1e07315ae77689ec461ac64b863e766fe7c4","sha512":"7817121b96a36d3e53728742be86bd0625aea8b3f796aa96891bf4db26be49ec643831ae0df83f160cbba34b28e7e05ae4b13f6c6e6a2e926f670cd29bb76b83","ssdeep":"1536:uCJVHFNRunKBOWyWQzyDrgJOYJ4WPhEGQ7LkGdXwDXExP8p:ucVlNInKBOWyWMyD1v3GQ3kM7W","tlshash":"4b44fce9db9bc4dc8e5111ded473fc05e4984923ceacb593aa2ddec17469f62808313a","size":255008,"data":"","first_seen":"2026-09-02T17:27:06.263892Z","last_seen":"2026-09-02T17:27:06.263892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/7cd50847-b2b6-490b-b6ae-c365e57b4ae6","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a61f87d7ac909f93650d7b0a74a46a9","sha1":"a1ae624fc8002c876ece8dcc2a956c5a3f959626","sha256":"b089a07f872d3f92ac932c81f376dafac93f607efcab1aa422f41b1149129faf","sha512":"756a670c6d40c758cffac1efbb61c558d4857b01a67900b1c2dd5864b1b25981c0b94607f0c1426738f43064a2d117181eb52393ae9e445deddb47e0073dec8d","ssdeep":"49152:qJV7GijV6wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtj1nc:QV9c","tlshash":"a5e523d26c4795b6cf84532271e75c0a55d80c23499ea0eef798f8c1386efe180eb95e","size":3313305,"data":"","first_seen":"2026-09-02T17:03:45.929633Z","last_seen":"2026-09-02T17:27:06.266892Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-09-02T17:44:26.478247Z","times_seen":3487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-09-02T17:44:26.477323Z","times_seen":3423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"shelby.cam/797e433ab948586e-s.p.dbea232f.woff2","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:09.103Z","timestamp":1788369969103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET /797e433ab948586e-s.p.dbea232f.woff2 HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shelby.cam/77860bb2510f7fcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:09 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\netag: \"69c7b9ad-7a38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1393\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98B4nTaDlPLI6oFJy4XJvvDzkna%2FIQYTmVYTcys323ppitoiq78XSJMC1KCsjVpyP0xlV5ZmqwQmQ2M81gcoS592k2YVpdn80%2F0ZvrpVPp%2BMnAss6HId88w7psF5\"}]}\r\ncf-ray: a34e37d2e9da56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31288,"size_decoded":32231,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-09-02T17:27:06.23519Z","times_seen":26011,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/GT-Planar-VF.38a6d1f4.woff2","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:09.105Z","timestamp":1788369969105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET /GT-Planar-VF.38a6d1f4.woff2 HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shelby.cam/77860bb2510f7fcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:09 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\netag: \"69c7b9ad-39cbc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1393\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDdVMXLxoRSFF6OWoBT4Tk%2BSY0cPCtfF2a%2FYDV%2FDDNrLVsCvEOohpPXgO3thY2AkNpIXqgFGuaKkLee272zTa%2FHDGamTj1uuXktyPp59sHR%2F%2FmmUfngJH3XKdJN4\"}]}\r\ncf-ray: a34e37d2e9dd56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 236732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236732,"size_decoded":237683,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 236732, version 1.0","md5":"c44b1198a7ef814d9abf98743177e7d4","sha1":"5472812e0680adb15f11f03a86158c2810d9e7b5","sha256":"6c082dc75b0ead55ca60faf7aa6fac2c6a197c23023c3aaf4c45e8c88929686b","sha512":"483c3d52ea38621426a3b4b240eef19bdf3354644f04e64c56b7ecebb1a531532d41b60d737a6d076945030660b7ba041ef92c2d51d58a98ad5cd4a6ea45db67","ssdeep":"6144:yM2CGWz6ysRpvfRSg+GbXWj4r8VjY2Ypgd9j3Gy:yXXpvf4gbX5wV8MD3R","tlshash":"e73413ce6118a431caea47e6d88e7d7bb10fdf02a39d4f6a490be0917e524f21935371","first_seen":"2026-09-02T17:27:06.235989Z","last_seen":"2026-09-02T17:27:06.235989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/ABCReproMono-Medium.0e01b431.woff2","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:09.107Z","timestamp":1788369969107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET /ABCReproMono-Medium.0e01b431.woff2 HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shelby.cam/77860bb2510f7fcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:09 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\netag: \"69c7b9ad-15020\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1393\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYZ1NBJAMjcKrDd%2FhPkUvuNUz7Mnqdawbxbn8EhwlMrvzNQUcQNuKrJuRwoD6FbmcOgP1oxcYRENOFL6VnLonz%2F8%2BXndhaOwOYSDBsd4ajjyBt7snXMjKRlpAHGi\"}]}\r\ncf-ray: a34e37d2e9df56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 86048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86048,"size_decoded":86992,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 86048, version 1.13107","md5":"eb4173fbaaa302c4758386fdadcb69b0","sha1":"b039ce3d772f975b4230d924c1885f8de3ef9a3b","sha256":"054b3c9f64ce07e35d1b99dcd5131bb20d24ba4023f09ed3d5f36b0e2abbfbac","sha512":"08ab2a820138e631b96515e990f42693aa30c80ed0d4d77747d963e9cdf99e44469dcf7c2ab1a89eea97e8ca70a80f35da2370cded2d76792297a9f93a965a7d","ssdeep":"1536:J5k9GWVR4ZM4mkp/pEUZC7sWhAEYhEkt16JkS838Zp+OGzByk/4yea0z2jAGoytE:J5kKM49RpAJqEkt1NS838ZoOysekstiF","tlshash":"5b8312512dd93d61e605a4eeeb6cec82ef901d6f3327526c2a24752059b6342cf123df","first_seen":"2026-09-02T17:27:06.237594Z","last_seen":"2026-09-02T17:27:06.237594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/secureproxy?e=jscdn/getFile","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:09.138Z","timestamp":1788369969138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://shelby.cam/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://shelby.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"37jmiw2bkv9g0qj3nozs\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wzGR4V7PmFKEFcztv1gabj7SNRf8ke2YRUvAAzor3tYjMRQO%2Fcb8q9C9IoXO2tjd7t1QaV8E%2FYtzp5bI3rMkWtdIMlHSvoaIFCwAaWF6E6Xwt7YaQedsGIa6QRUteUQMuDFauI%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a34e37d329e456bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3313305,"size_decoded":2553296,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28aaca869c540492312afe88e25703ec","sha1":"f5e13ce92db6f9837b66519aba1b17196c3e0082","sha256":"205ab86bd155b7a77cbed7dd00c9036124725abe724fa23bd4b29fe9c67108fe","sha512":"376742560ee9c8e963c1458152ff1a39a83eb61291de069f06eb21f366b11c14e8a8829b6cca384dfc1e4559952327adca90be3ef3cad4e4684badff7da565ff","ssdeep":"24576:qJVHoTOGY3F5m6scNQeMbqFW9rcdNrdSD:qJV7GijVs","tlshash":"0e2523e01c46e1768dc9a23670ff2e4ec6d44c42498ae2b5d3d4f88535d67f081dbaab","first_seen":"2026-09-02T17:03:45.881241Z","last_seen":"2026-09-02T17:27:06.239374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/shelbynet.html","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:09.459Z","timestamp":1788369969459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET /shelbynet.html HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shelby.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:09 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nage: 1394\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diY83bU0U8Fp8A7Zb%2BxLWHRlKMbhnMM%2F6MfrCmRj7%2FHVXuH0PvxCQrnluiWeLdE%2B9V%2F9eWoPGQZPGzoMliRcYgTf2dsEoK4qv2zWBzJ5F%2F%2FFMzjGQuwVxPKekUrE\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34e37d52a2156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283291,"size_decoded":19251,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"1f8cabde121fe17fee8171360ce2e99e","sha1":"0d362825942dbf5194adb5373ebfb184b5d0859a","sha256":"9f668a82276cc5722f2b3f178a756205aa26d78e6ed4f9a00808ad0e697bc99b","sha512":"7af24dcbf3d1e11fa5fb611b0232bd699d62c0f083f1572e2b7bd884b6c0d57167eb95ba4fe76d2ab69213fc7ea278da7d941adbb71f8e460c50f432f3ced303","ssdeep":"6144:URwy6U8ha1XbHDFgy3I7P5yD38q06bwPRQs7MRMcFIo5+HqqgaqIvq5aq3/q0Bq9:x","tlshash":"cb54b3207450f93f1e2a9dac3578fde681cce154c174c1b6f7cca6221ad3976cb62aa4","first_seen":"2026-09-02T17:27:06.240001Z","last_seen":"2026-09-02T17:27:06.240001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T17:26:08.346Z","timestamp":1788369968346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 17:26:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cdof3YgzX0Aq6v2WWiCQ%2BHZSR3D4unw5yabWNakogqnWa1Jcaer79CMLSHUNSv1MxBCWqeUrnWef5DJiaevSqRxjDaQMVtuvmcm1dB5vTddWCl02kdlh3kFkcvz0\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1393\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a34e37ceaaf85691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250733,"size_decoded":19268,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2387), with CRLF line terminators","md5":"fb8a388d8565d2e288ca33d343da6d51","sha1":"d6fe80f70a223b1ac73ec07e2c56324fb8e65f40","sha256":"3d78354825af4bed54b098f5dbeb6e383137eeb36b0bc771f428848461a0615c","sha512":"ffae32095dc0585c52d08c25852ae9f7d7a0061d4cf2ebd838264f6c116d872275e0a251bf94bae500c285cf0568a062920cebd6917d7688c13eb6466c7d5b6d","ssdeep":"6144:4GwWyjwYouBmrSaualCRd0HXsUiVIh9mXAN90JZVmDONLt0GBzOwzdFzDkzYjztG:432","tlshash":"aa3464613490b57f0a378958baa0f9c4e695e002d6358025b7dc27232ff3eb7c66762d","first_seen":"2026-09-02T17:27:06.242711Z","last_seen":"2026-09-02T17:27:06.242711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":48,"connect":1,"send":0,"wait":59,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/77860bb2510f7fcc.css","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:08.697Z","timestamp":1788369968697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET /77860bb2510f7fcc.css HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shelby.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\netag: W/\"69c7b9ad-176f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1393\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNJTBFjG83DjijkKmMzI%2FVE6tPfxYz359V2dLzPXO7RzxHXpH%2BcPu18xMB%2B1Y12VSse0CTtnMOEdRtrkxL44J5GcL%2FfdjgFZ45TYyCeFLNZGiz%2FUzIf1%2BU5BJ4ms\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a34e37d069b456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95988,"size_decoded":20696,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"696a69811925f16665e985272b966354","sha1":"1f93eb9e28a6fc97bec93998e734bcccbbd937c4","sha256":"0655fa3b253073400725df69a557f0affc8bd2abcd4e6d02ee5179c1eee19cfd","sha512":"41f78d7bf87aedbe90da3546bc0ae6d46bf0896c61a1374fa392a0ee593277fd58ee73b81669ccaec2a4df92c63bee12e6e95dad353bed6e3152d7460fc294b7","ssdeep":"1536:7tw1Jr7RdPvww5JSmvUtGiSsMq+WDhY7azAhfG3988R988C:GJr7R2wzKGEMq+WDhh0h+4","tlshash":"3b93d660e234ea3fbd3768b853ace85c72057191deb807edfa1172115ac7bf20d6a614","first_seen":"2026-09-02T17:27:06.245437Z","last_seen":"2026-09-02T17:27:06.245437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shelby.cam/runtime-3ip9b6xx48d.min.js","fqdn":"shelby.cam","domain":"shelby.cam","tld":"cam"},"ip":{"addr":"172.67.153.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shelby.cam/","date":"2026-09-02T17:26:08.698Z","timestamp":1788369968698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shelby.cam","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 15:32:53 GMT","end":"Thu, 22 Oct 2026 15:32:52 GMT"},"fingerprint":{"sha1":"EB:74:CA:B6:2B:28:80:A2:A4:12:A2:20:9A:31:9D:F8:1B:7D:4C:51","sha256":"DC:AB:46:D1:95:2F:16:05:39:B3:30:42:14:11:AD:B9:40:7D:5D:3E:89:DB:2F:A4:86:52:86:86:E7:AD:40:17"}}},"request":{"raw":"GET /runtime-3ip9b6xx48d.min.js HTTP/1.1\r\nHost: shelby.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shelby.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 17:26:08 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 11:21:17 GMT\r\netag: W/\"69c7b9ad-4dc26\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1393\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTVnjBXOy1jt9koqDZCgQSkInUsSxNlkrXp%2B3%2BjnkyaeEjKcIK3WpU5xH%2BQzpXVfxd6yRJDYpUApKwcU8xYGqci8bQ2iu%2F3x3cPhN6%2BieeCPmHYvBP%2FH5UHsdjIp\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a34e37d069b556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318502,"size_decoded":57694,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7e6691c6426e1dd1b39e42c779017feb","sha1":"192f63783910a4806e64ae729c7b5475ada80660","sha256":"d965cca4172e59fb7c01b56be34a957f9d03da7b433cd86f13b171353b08232e","sha512":"2bdf42569e70a4cfa7a338c62e38da669cb03ec17eebf8d02e74286f0013c5a0b799c91197a08787281ef4b59f4245208bb0f9f301e9e3b213bd25d1108a6f8d","ssdeep":"1536:eY+WjZ8qrz7JnBvmhdB1QJrVSL+nsPPgVaU0d3WkuzysJ+9oNJKfbz3onH0o:eZWjx75BvGurxnndkGMc3d","tlshash":"0064dcd59a8a85a5be0611cdcc33ed05e0185d13fe6cf183aaecfdc17069f66805b36a","first_seen":"2026-09-02T17:27:06.246998Z","last_seen":"2026-09-02T17:27:06.246998Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"shelby.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
