{"report_id":"d9419fe0-fac8-40b1-b8f3-1bca222a3e18","version":6,"status":"done","tags":[],"date":"2026-05-29T21:12:13Z","url":{"schema":"http","addr":"cffeiji.com","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"104.21.15.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cffeiji.com/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"title":"飞机安卓中文版：纸飞机汉化版 - Telegram汉化包免费下载 | Telegram中文教程","dom":{"size":30902,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (520)","md5":"4120e7914cd4c0e449056b826848f2ad","sha1":"00813c189da5cf1425d14513c54680203e57c3af","sha256":"259fd1ced6214d188c0c937e66d2323e0b9494456836ab3e8dccaaa5d16eac20","sha512":"6128648a5ed9291808cb70e8b17f07432ec03c8fead5be588f535ec1fc446be8f84e0d37bf14e836e54bc7f30eed5ea9f2b04ca9fc747b69db9ceeb1cf607c25","ssdeep":"384:8d+i2vNY16oLcLaTF5TGT+TeTONKVwMyqC+MxKrlCvIYA/MxKes/+xKrwtOOCvZS:8d+7vNY11YpCvCJqxwZ1d8r","tlshash":"7ad2a6a5838dec7b611111e7743a638d207fcc36ea23cda3fd7f511a9386c51882759a","dom_hash":"domhash180af1196cbd97a87bf35b7f048327ff","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cffeiji.com","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"104.21.15.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T21:12:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cffeiji.com","ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":44,"received_data":1859668,"sent_data":19519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":477225,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cffeiji.com/style/js/jquery-3.3.1.min.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-07T09:22:26.546107Z","times_seen":133715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/js/scripts.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"687fb73e508b2408b01eee5f3436737f","sha1":"021be525ddf79e9177bc6c3184129b66223b0396","sha256":"ad4972e05380f94ec6874a77a990add148682f79a0f5cbee6976fa6c2a73fe4f","sha512":"24dab28f26c0a28af1f91079a0fcbb9287f34da9b55d9a14aba099f5db6b56baf81ff380541a0538891d38d7b408e8bfbcb2f631bb90bfb246c348383589fa3d","ssdeep":"96:81H76scB+pVnZl03t+YLtEu9li4OhdIlnTHA0q+mEb1WM34mKLnigPlLniQhM+T0:wi+pVnZl03t1LtEu9k44IlnTAlBa1Wev","tlshash":"36b141193064386e542fb2a8dc3a55086f6c0509c20288a4f58e9cf7bf5417f9bfea9c","size":5364,"data":"","first_seen":"2025-01-01T18:21:04.049757Z","last_seen":"2026-05-30T00:51:25.366287Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/rem.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6a8d4dd97fa85e4acd74219f2515cc7","sha1":"7776f92b80c056b8abf9fb0a0bd804852c3de7fe","sha256":"2e49bb7f35a25e0b98c76025b36ced6b7c095f26f876dd4c522fb8a9d3fe4678","sha512":"4741201e4c849fb8ec18f63b42e0128b205f35e43406e4bcf90d82c22c49aba12b6495f2a935aff731fa9e5fa04955cd4d87840302aea15a89c7b251e2793c72","ssdeep":"","tlshash":"15e0c0951f007a30c9e7c72b73af72153d3710c64901ba05d52d898c4934d8611aabf1","size":362,"data":"","first_seen":"2023-10-27T01:28:36Z","last_seen":"2026-05-31T23:37:12.896951Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fac5715f129aa0ecac105b8760770691","sha1":"5872707bf731d148d003a40980c864c7801f9c4e","sha256":"237a3a01bb102c1d27e6e8bdb9da91acab84308882d46e1dbc35891c02dda647","sha512":"5c9fa4e37f1b6091b0aa2eb88da858ac63a8abe7c38bb682f04318450de5b0e7447ba56802a5dc7e5cf814c60c52161ea640ff14d42dc1d5329973262157259c","ssdeep":"","tlshash":"b8b0120d8b7de33742bd81560bf203ddb070400d5a041b69142c0459746186a1203c9d","size":95,"data":"","first_seen":"2025-10-23T08:26:50.975918Z","last_seen":"2026-05-30T00:51:25.395888Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/js/tgsticker.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5681befa963b0ebf20d17ade24377437","sha1":"b6561dbe9d03683b74c1b8802b5fb872978690a3","sha256":"34032951bc9d9589dcde740cb6d0b14811c6cded88e37063586b0cb4cad059ef","sha512":"838e431d1c009315f328609bac8081994353963d917a1c7c9a72dbd7a37688c361ac3525e02ef47eacd3b4746bff22472ed2015172fece505903bf34ca9b15b0","ssdeep":"192:+paoN6CETKwSCyGUmrQyZ190RyzScUpyQLt8TroqwCCysTKcXWLclObFyBCqSCEp:zSNHmoTi5odAvt/2WT9","tlshash":"fed2cf4d89ab6165a423703dbbaf410632348007790edd30f90de768af9952f16f6bed","size":28745,"data":"","first_seen":"2025-10-23T08:26:50.897628Z","last_seen":"2026-05-30T00:51:25.376187Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be9847ca76d7d7c4d7984c401c29e276","sha1":"c0c7dbcbaa32ff95640fb8d5f7e4c0495bab2d61","sha256":"61e44c4a5f7ceeb9f7478bb219bab19f9d2cad8cbd40d0efc9966485eb63ae97","sha512":"e0da3b0ed48458f13250a71fe835e6c2a667d69c81561b13d162ef676a4df20947181ebc165939dff070d7fb331b6e7b8600dc1afcbb2a5130604cf7ddeb19e7","ssdeep":"","tlshash":"fac02b8d2716dcb064fb2380cf3f7102b4113310ed911c334c456309a231c175308c00","size":157,"data":"","first_seen":"2025-10-23T08:26:50.978495Z","last_seen":"2026-05-30T00:51:25.396483Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f40ef71d814792166bda120c1eecc9a5","sha1":"6e4c85fb988e18adeae9f49b4dab7b9a69caa05d","sha256":"d9fb34dba079638c9f406ab9e89781abcf91e51c9f105f59cd4820c4678ec282","sha512":"1b9cc1b82510a8de850d01f656a37a74c5b6f5303359388d1d12db19e2beb360811d2d832ccbbb1e9fccf684fcf753162082c0bba08a3dd34e1898db58f149aa","ssdeep":"","tlshash":"6771cce5ebceb17fd01120796e2a12df573c41b2d8054e77bc23ea189460d3d226ace5","size":3816,"data":"","first_seen":"2025-10-23T08:26:50.983524Z","last_seen":"2026-05-30T00:51:25.40666Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E8ZWY5SJ1V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ae1f6da2efb80c379ca63db933541e6","sha1":"c3fe7717193d502748b0d6e5033c6177118800a8","sha256":"28bac3380495a12ea1dce4cfb4690cefce1241c961707428b9670e08fcf24aa5","sha512":"1b64551f38a86f5c0b202ddb889553922d858d9ca9dedf7d97f96d4c03047e1b00d0f0ced61d29592f733b9ccbfc5cc730ba8dd7720b5ff9ab9d08beee4989ba","ssdeep":"6144:vzHRfDNalVf36lwSXbDQCtEhuX7aWCBbn95ma5V/Qo+:bGlVf36RDQZ75xl+","tlshash":"41a4facdb3d674625396f478503f018ba57b28e2b44cc89ab189cce42e7469a4277f7c","size":476621,"data":"","first_seen":"2026-05-29T21:12:20.352131Z","last_seen":"2026-05-30T00:51:25.368017Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/js/output.min.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3fb846e6a07db4943da9a92fcd51d63","sha1":"bc019e8a3b5c60cea77866cb0221eb43ee958cb5","sha256":"7d84d6e2b592243ff64a2d566bb509bc76084dd9f856bda6785d680214ce79fd","sha512":"ef122cdae6b68661d6c225c3b34a155cc070f71a4d903f5229f151a9a383fc4cb8d27e51c07b50b18a54859308b58a076249231a52e35e33326d518cd59d8528","ssdeep":"1536:Pfh9+S0T9XsHGJjHh6sZMFumnVSaAhESoOFgj34Ds4typIAeehu0cLvc3R+a0Wsq:Pfhv0rwNVIE1nintyC+J","tlshash":"a014f749b260b46246ab61b5513f520fb237691ca40a806cf9bcd4de6dbcd89313bf7c","size":205240,"data":"","first_seen":"2025-10-23T08:26:50.949515Z","last_seen":"2026-05-30T00:51:25.386392Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T09:08:12.433678Z","times_seen":362909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/main.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4772067090116f5cdb5f56774f1631e1","sha1":"10aef7121b34c7e90d30d0d00a919d1cec6b1904","sha256":"8b265cc4e07ba5e0ed4eb78d5dd572bc4adb0109ad2591be02e67c814937713d","sha512":"31061bfa6634461cc44b65e5527a8f8062115861a4fe324385141ba5fec44f0a3a4cb99b494648daf8097016f16dbf74cc87f7417767f8e00ef63c02c5487596","ssdeep":"","tlshash":"f3219d19b5c8803f862f7769edfe1345693000176256e02e756cb1347fa0c668d6e8e7","size":1214,"data":"","first_seen":"2025-10-23T08:26:50.924438Z","last_seen":"2026-05-30T00:51:25.365671Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"afd73494f4aa13234123903bf1b97f4d","sha1":"7bd53f2165735b53c1ffc3c8287902426e079a0e","sha256":"b2c9a45283be62f5302ab8c01af27618a1b8743a37e9c2a8016b98f495c87644","sha512":"5106f190d5701bd07f0e78e62893d17ddf4179c7b7412fc4e5d7d2ddc7edcac6642ada3e6c0c8d2927e072f11fe901ab1878aedcafc4b812af0eb37252d81b7c","ssdeep":"","tlshash":"7621ac9fa7f794220327356855af6409b13ab007384dad4a797e4685afa1c3340b3acb","size":1355,"data":"","first_seen":"2026-05-29T21:12:20.398723Z","last_seen":"2026-05-30T00:51:25.407398Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cffeiji.com/style/js/output.min.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/js/output.min.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Oct 2025 19:06:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c6-321b8\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Dk9%2F4zlNelgmjJh7F3I67H5wimhJDcsTO%2BQqPrNNZq80ljowu1kc2oQraPP%2FAsIQZLhaQxfAjXegvWiDqyT2GJie8jPacDiYkTqvf0eYXTLkWL4FhtotiR%2BhIyrEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c5056af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e3fb846e6a07db4943da9a92fcd51d63","sha1":"bc019e8a3b5c60cea77866cb0221eb43ee958cb5","sha256":"7d84d6e2b592243ff64a2d566bb509bc76084dd9f856bda6785d680214ce79fd","sha512":"ef122cdae6b68661d6c225c3b34a155cc070f71a4d903f5229f151a9a383fc4cb8d27e51c07b50b18a54859308b58a076249231a52e35e33326d518cd59d8528","ssdeep":"1536:Pfh9+S0T9XsHGJjHh6sZMFumnVSaAhESoOFgj34Ds4typIAeehu0cLvc3R+a0Wsq:Pfhv0rwNVIE1nintyC+J","tlshash":"a014f749b260b46246ab61b5513f520fb237691ca40a806cf9bcd4de6dbcd89313bf7c","first_seen":"2025-10-23T08:26:50.949515Z","last_seen":"2026-05-30T00:51:25.386392Z","times_seen":11,"resource_available":true,"data":null}},"time_used":1351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1081,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/icon.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/icon.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 11:29:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d678fe-2509\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=742A5CHa%2FsjvTq%2BYueft6UwNpot7xQt1dZeWlDRk9Sj5rcXyhVC3%2FogiFnNpCDyIEagGnXglMRGUnwS%2F3dp%2BRHo5pxsntY%2FedPUqc7Sz%2FrFhzUShPNJuDZIuQx9jpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83cd1b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 236 x 236, 8-bit/color RGBA, non-interlaced","md5":"1621329dd23288d41124901ae08e2a28","sha1":"b0f835b0e46dfc70a1005654139c9ef5415551fe","sha256":"600d876466c21d04fef5d2052cafc105e19995d59d410b7dfa821c82a07e9f00","sha512":"c4bf01fc1d31c99a7275ff88037e9a7b33daa9f342700043ddfe20e58fa4531543ae44d8ea8b74cd8e39ee462424d42c3282b8e63eab1dadc25c543a3043f305","ssdeep":"192:ao9EsyiMSrUfplZjPQSpzql8jBi6M0UKzoQ23ksT1ARhBiKrCr0OYD:81ifryTpYxE2jQZCHYD","tlshash":"9412af43b926c3fb98e40a37054c73099afe72379293049164a377a197d9031a7fa63e","first_seen":"2025-10-23T08:26:50.929613Z","last_seen":"2026-05-30T00:51:25.378281Z","times_seen":33,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/6.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/6.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b8-3192\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFXiI15SxchBgsaDiZR8o3zMJ9eYKLsI3lsqtgtIvDoELKQcCcvKUqo16dGVjVwa9nCdvLDaBFLpQtkBNhGwAk0u0RsqUQp0z%2Bv9lEt1HxxPbtUnwD11NQx%2BDqt0Ww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2856af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"9c2a194ee50807ae9342b60634be2445","sha1":"553dfd2ba2a5e11468a3b57aba897995f2f4d676","sha256":"ec1788bcdd05595bbcd16e5c7c13bce6481b620ebbc4200b2e6598c02c82aa78","sha512":"27018db71b0a93e3e68e42e0f9dc8528f7c807571c5ed1c1330bb5fac68a1685869bf04043167f885ea413ae6b0ed029cdedce64b1354c0df367603ed0baa67a","ssdeep":"192:qU6SieKSVdeYciqBy/VHaqqtsNEQ8bwRP46NLvDMm5GebYlttyr:qz9e7e3iq+HlHs0qaRkJAr","tlshash":"2542c0d3fc6099d75e4a01e3096faa651879203c2fc0da3f66115967f1dcc3ea7218ca","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.514082Z","times_seen":1180,"resource_available":false,"data":null}},"time_used":2290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/bootstrap.min.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:52.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/bootstrap.min.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c4-2d0bf\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dK3Dq3jRNhHFU8D2aENTjRBQ4u75j33dAeyagOQtycOafzdi%2FBPAOiA6EJds9T6RMwdZrIqqvMe%2BKJIt9CsWzA9cjmvEKqcznxg8aGOM1%2FkAHaUZDYB8cL%2FrnMp98g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4056af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184511,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"72f2c180582bdce7e121fe2062f093e6","sha1":"a9dd43ee097903f5cf002aa8c857bb16cb2483d8","sha256":"b86de57427d2a30de5ced8108ef7989e45f2bc870da26cc0f61b8f26377be4f4","sha512":"3d7a111030c74499afd8c0b1bf4a278b1602e5847d0fba2dba071c14014aee08a9c019427791f137ef7e4bba5bd8b91be2bff204967810d784075e43f2a3e861","ssdeep":"1536:rGOVkBgIEb7di8mxhYSgIsUX33UtusKRMQmUSZi20Yf8kHSj+YLjUYi:rjT7di5C0ZkHSj+YLjUYi","tlshash":"5004751ae8f22959180b816c16ed67a5737d8087c62eeeb97d9f33408f4d1c58d72e8c","first_seen":"2025-10-23T08:26:50.826258Z","last_seen":"2026-05-30T00:51:25.394215Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1061,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/js/jquery-3.3.1.min.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/js/jquery-3.3.1.min.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Oct 2025 19:06:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c5-1538f\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWYKSWRPSvTYP0verJQ7VQdqFBSXWetwAU8bEAJN17QCshub8iaCwH9RkcQsKKbwr8t35aa65hGLlNOZrKtNLdiEQ%2BqjBwv6xBCkDJ9I9z2mwzce%2FWYImhD2JgG%2B2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c4f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-07T09:22:26.546107Z","times_seen":133715,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E8ZWY5SJ1V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=G-E8ZWY5SJ1V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\nexpires: Fri, 29 May 2026 21:11:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157524\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476621,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"8ae1f6da2efb80c379ca63db933541e6","sha1":"c3fe7717193d502748b0d6e5033c6177118800a8","sha256":"28bac3380495a12ea1dce4cfb4690cefce1241c961707428b9670e08fcf24aa5","sha512":"1b64551f38a86f5c0b202ddb889553922d858d9ca9dedf7d97f96d4c03047e1b00d0f0ced61d29592f733b9ccbfc5cc730ba8dd7720b5ff9ab9d08beee4989ba","ssdeep":"6144:vzHRfDNalVf36lwSXbDQCtEhuX7aWCBbn95ma5V/Qo+:bGlVf36RDQZ75xl+","tlshash":"41a4facdb3d674625396f478503f018ba57b28e2b44cc89ab189cce42e7469a4277f7c","first_seen":"2026-05-29T21:12:20.352131Z","last_seen":"2026-05-30T00:51:25.368017Z","times_seen":3,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":113,"dns":0,"connect":28,"send":0,"wait":43,"receive":81,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/ios_zh.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/ios_zh.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/style/css/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 16:00:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d6b8aa-16730\"\r\nexpires: Sun, 28 Jun 2026 21:11:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJQgy2GCRTm6035Fdd2WwPdXEvzkuxEVkdlfoL1x95c2fDY9Sk1JLj83svvwJz%2FqEbZSjp9Yyh0gje%2B8o1Gd3aIiCsq2Y5f9pvtGJPxOIBIojmwIfdkSNAHka9VU%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e835d1656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 775 x 825, 8-bit colormap, non-interlaced","md5":"a8201635297cc8063dbb0192cbe4b5d5","sha1":"fdb88ca5f8b44475375db32e5a1286401d7a40e1","sha256":"7f19b336dc3c30654a972ed728bfa7505a6341243aa923ca5df86c2c2d6739c1","sha512":"e8d676db3da2afdcd1a65d37402b4b252787df7c493bf0b02f2fc414bbb3843683287ea3144175b6a66e22ce973702da517d6b5e4a7291d45f9ec3aded9d92c4","ssdeep":"1536:OfboC6to8o2VXq5TjLZ1f6FZ4iF8F1zvS9af4US6MyxkhmPJP4B:OTd8n65FoEiFszvS9Hh6MyihmxY","tlshash":"2d9312ecef47a86e054a316b3c13f76ce496787dd24d946b4d42a8214363587aaf083f","first_seen":"2025-10-23T08:26:50.952683Z","last_seen":"2026-05-30T00:51:25.39207Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2042,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/faq.svg","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/faq.svg HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 26 Sep 2025 11:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d67900-939\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCankF4QHAlfUPrlHYWN3E8lZrAmzGKvxqIkTEzwLmiFRr9qdwvtIaFGyfoePzdc8B9mGxLI62tPUI%2FB5FmZdrJ7hkS8UZ%2FJ6CbI9N17dcGTzWNZTn%2Bd0OmvIgqUoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83cd2156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e4097bb56640e26c2d8fbfcdfd34579","sha1":"dc16fc9dd88b5ebea71031a200fce6c4e53d260a","sha256":"7f406e67dfb5a34396ca0c521426a40df8abe406a996abba581183ee1c19aef8","sha512":"1bf4ac86774d9faa1d29d4c4d6f5c1d03931f048c503dd8995c7230c11e3bd99f0ab23dcde4dcb4ce01958d113d45bd8e0c2f4648e92067ef3b308b8eb0c226e","ssdeep":"","tlshash":"044197e4e72853ac850acbedba1620f6351f34d27b8142e4d296cf24d114a2d5f84e9d","first_seen":"2025-05-26T13:00:36.969379Z","last_seen":"2026-05-30T00:51:25.371593Z","times_seen":12,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/apple.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/apple.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 508\r\nlast-modified: Fri, 26 Sep 2025 11:29:06 GMT\r\netag: \"68d67902-1fc\"\r\nexpires: Sun, 28 Jun 2026 21:11:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnmTBaUoBudcbLqIEQDVP9qyejjZacRUnZM2jPBYBmgYJm7rSLQloOPUePYatu5Ek43nkTXQiUGl8oyBK8i3zcbTsXm4cMi%2FsUp71cbem1oU5uwFxDQSGX0zxCQr3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0387e7c2c4956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"498455bb0543992ff528086caa28a59a","sha1":"bbf6ca21e327b9c49816ed3962e919e2f4fa359f","sha256":"38e2e140486843dea0ced0adc8f12260ad43ca32fe66c11c0e91f1fe37bc972e","sha512":"57138badd308ebeadee1db07f610e6b0f131b501934638bd342f0dd377160e832c8589f4303f10692e198b4f825adc1bc0f19563a793ee8e2ca14f4be7f9edc9","ssdeep":"","tlshash":"baf075a0bcdc193fbf7664243c6760cc5d8782c4a200964bd1c83044590044645dce18","first_seen":"2023-10-27T01:28:36Z","last_seen":"2026-05-31T23:37:12.919544Z","times_seen":34,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/index.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:52.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/index.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c4-ad37\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MGT4E%2Fd9YhXnV4MHcTHiQ3C%2B5NvuCb%2FjiFGaVJMb%2By%2FvEq9MTM2YmxJchATmQxPL1g2CFIAFju%2FHIKfY4%2B8jzW3M9X%2F286UuB3phVR5y3Va2L6A5uTtYWiZZUmgFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44343,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4b647c6760d939d1688643729a428cca","sha1":"d27f90ad24e6f8e256d09e506df3b6f6128b4f8f","sha256":"ce44d0ea491dd837db078f35caefa26baa2f7467631832315f331ca2c8f70d9a","sha512":"eba12d9b55627ea2d3af6285fa508e57313ef04e26c972d5b2407e01c733c2fa4cf7fcab1d6410eaa312c301d6edc13e07c366f296b1998a95b45d76e7753937","ssdeep":"768:7GkF98ib8qFxHR5x7xcxYxYgRTxYUwHtNFBFP:7GkP8ib8qnRIgRCUwNNfd","tlshash":"b213211aa9631844385a853c1b9e17d427718823c60bccee3deff64cffce641a26174a","first_seen":"2025-10-23T08:26:50.904557Z","last_seen":"2026-05-30T00:51:25.37668Z","times_seen":8,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/blog_page/2","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:56.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /blog_page/2 HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nCookie: _ga_E8ZWY5SJ1V=GS2.1.s1780089114$o1$g0$t1780089114$j60$l0$h0; _ga=GA1.1.1930646578.1780089114\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:57 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlocation: https://cffeiji.com/blog_page/2/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ma0ixnaD%2BSE3rXifksMB7k2VSPFc7spt86xwLN5F0WvFPvhJyYUneG9n4vADP2VsaTOvOHKDNdoPDIs1XHkjQfiFEhHT%2F5kFDADpaH1WLRh%2BuwXZRCwWxvICiN%2Fdzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e920ded56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37921,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/responsive.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/responsive.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c5-54e2\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2B72R9fMvQjswleLhoVtiF%2FLmWD0IoCctrk8muQCoC09eMty51s9didN5qePxQu%2FLavURiHFaf0ygCo0f4O%2BLKS3OSyegir%2BIPxRFhZOHVZ5dBao7L5Hd5zO3UFe1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21730,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"39f5bbf43678a4562c3f7c19e768a007","sha1":"5fe9479b2e06a669fc55aa39948c1345077529a1","sha256":"31f799646489bb6e9b6291c5ca1be05ce08746d301a75c9abe77af890c7d9c0e","sha512":"b1c479b82cf399dafcdab713878d5fed2493dfd9a1316ae215edcdadb413030fab6c467e5b7d05132498ba4a0a55a56cf96f24bf100b4da248ef81d5400c728a","ssdeep":"192:F5TyY43/V4A/sCJYx6ArzUxFfkoYx4l/9FCAWs+K+zf94x4lVcn4dnYfHka2lkuZ:Fm/TdkoYqIAVofWq/Uw","tlshash":"dea2ab4b6ae226586c07617cdafb2a247374a403da4edca4bf8c2148cfcd591dd82b5d","first_seen":"2025-10-23T08:26:50.909642Z","last_seen":"2026-05-30T00:51:25.364484Z","times_seen":11,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/js/scripts.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/js/scripts.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Oct 2025 19:06:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c6-14f4\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUkZ%2BcVwOyRW14R6KU76Ip3rEfi7kFdBmkJoHvhj0VdJbV0HP94ln0Sd3f%2BAObM1G3qvw0PC48ER54s5T0sdGO8VkcN994RlCarevFv4y3zwvlR4q%2BkAN5K6f55iFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c5156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (789)","md5":"687fb73e508b2408b01eee5f3436737f","sha1":"021be525ddf79e9177bc6c3184129b66223b0396","sha256":"ad4972e05380f94ec6874a77a990add148682f79a0f5cbee6976fa6c2a73fe4f","sha512":"24dab28f26c0a28af1f91079a0fcbb9287f34da9b55d9a14aba099f5db6b56baf81ff380541a0538891d38d7b408e8bfbcb2f631bb90bfb246c348383589fa3d","ssdeep":"96:81H76scB+pVnZl03t+YLtEu9li4OhdIlnTHA0q+mEb1WM34mKLnigPlLniQhM+T0:wi+pVnZl03t1LtEu9k44IlnTAlBa1Wev","tlshash":"36b141193064386e542fb2a8dc3a55086f6c0509c20288a4f58e9cf7bf5417f9bfea9c","first_seen":"2025-01-01T18:21:04.049757Z","last_seen":"2026-05-30T00:51:25.366287Z","times_seen":12,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/1.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/1.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b7-2c4f\"\r\nexpires: Sun, 28 Jun 2026 21:11:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y05th3t3tf9XTlAz1sflDAprYNctD2hyX5OsixoQixScnEql8IUPoYUgAU2hsiP%2BVbVcALw6vc0FksN%2FDit9792J8WN7EAcQPuDKcoONti1q%2FP72WD67zl%2F3vQeDtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83cd2356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11343,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4e06d87c860ba8e8a804350f42632217","sha1":"31d3f89ae95d6f25660020b21e49114aaecfdd59","sha256":"6b081cb199e67a43ddcd7ddac0b528c93cc72bb82641937368a41b0aece43125","sha512":"c28516686e07c341dba58b28c8185ac31ff479d7b4f8d081cb50b395c6678e353b8d0d00e3b21185dbcb6484f81a354170d403b8b6f6e7efe8d73017d1d681ed","ssdeep":"192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru","tlshash":"fc32ceebb95170dc581b208b3f005099cc5df6500d2e2e9fb9fec78910238a9a580bab","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.508541Z","times_seen":1175,"resource_available":false,"data":null}},"time_used":1258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/9.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/9.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b8-4b7d\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pEP6%2BGFyQIDG5gLYp76OLVz1I4skXTMIit2rGm6LDKLn3i1lqInrteEzMDbsBpMp0fxDnkljf13kFZyjOF1pbZdtKN4bTZ9GxVyUbo0ikNsY49qqLOK%2F4FMK7CwNrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"da1ff638a4141eed84327e20f936496f","sha1":"91e5410531539b53c3aefcc5774413e8a665a57a","sha256":"b66de388c12d6611870503c34c5db37fe079313c4292177435fd8dc7ed6cbe67","sha512":"75b6243feb853275a9e4aa1c36591cbdc3439cd27489cd5833f8670e072acecc59888699bebd3ffe5f8d1851608394d3255eaaa863db438511cb4798f99d334a","ssdeep":"384:/fkqoRm5m06jc+ejLD9xyVF1gX+Bq3lCTiqvfKs90HmFOGJaIv5Se4:/cqo25lu1RBJmYtiH8OERvK","tlshash":"3e92e1724b62b388ea599ce2524f72724cb9f52f5830afca12f5c544c1cf9ee402e56c","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.514848Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T21:11:51.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:11:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 08:22:30 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWX2SoQyHyVjSTnf5zisfvYAzvg%2BjrhK%2FGizuy9bqyIuWkAnW5ME46paECHMEdd82bfnUH9KbEqDZQpFDTIqQe6iF11iFFFLsO2vMiGsIwgpuunrTkMKXgqjuLtDnw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a0387e75cabea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32147,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (514), with CRLF, LF line terminators","md5":"bd03803623e2cb7871dbc142f0ba3403","sha1":"30f2222d43b359d575283596664e5028e7ef2f34","sha256":"299e8800ead382431384a45f82e29a2536b5e50403586254657a92b349f0d901","sha512":"6dd929ee3c12eaf791fae7a8d64215893a85a8ee79502e781e5ca136b3132cb66c3d106affd5462e83e4584f83afef85ddf949928819a751d6913d0b107c72e1","ssdeep":"768:IfGzl4jyYwGN+p3a0fQ8bGNyIJqxwzpTWs:IfGZ4jypp3a0fQ8bGNyIJqxwNTWs","tlshash":"36e28465728ee47b511312e7a13a6349e06fcc36c7238462f5ff723ba392d11982359e","first_seen":"2026-05-29T21:12:20.360913Z","last_seen":"2026-05-29T21:12:20.360913Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":108,"dns":88,"connect":1,"send":0,"wait":856,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/rem.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:52.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/rem.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Oct 2025 19:06:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68eff0c5-16a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKLnae4RwIFV%2FddXqfPPuHG8%2FXJ1j8Inv%2BDqPz8g4cBygNtO7hiOWGtIlO777I1CVN2o5mvIFsKCPHJ9NLECPfPRVgr7bve5ZgIrF66Mzp5wkUHzTxZ8K91wxcJpyQ%3D%3D\"}]}\r\ncf-ray: a0387e7bfc3c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e6a8d4dd97fa85e4acd74219f2515cc7","sha1":"7776f92b80c056b8abf9fb0a0bd804852c3de7fe","sha256":"2e49bb7f35a25e0b98c76025b36ced6b7c095f26f876dd4c522fb8a9d3fe4678","sha512":"4741201e4c849fb8ec18f63b42e0128b205f35e43406e4bcf90d82c22c49aba12b6495f2a935aff731fa9e5fa04955cd4d87840302aea15a89c7b251e2793c72","ssdeep":"","tlshash":"15e0c0951f007a30c9e7c72b73af72153d3710c64901ba05d52d898c4934d8611aabf1","first_seen":"2023-10-27T01:28:36Z","last_seen":"2026-05-31T23:37:12.896951Z","times_seen":26,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/qrcode.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/qrcode.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 13 Oct 2025 11:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ece648-3f01\"\r\nexpires: Sun, 28 Jun 2026 21:11:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fv4jd%2BS%2Baf28mz%2FoxCq4yPQbCkpTAzJHKHHkyi%2B3Cbbgp4LBNZmcyjJzP4fZlT6FRp8Ir7mjmP%2BlJlKKlbvc1XYtrpm9IoZLNCvUgXKPS1B57jmB9xWG5g5G85JmBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c4c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"557d5e22cefeb866be1fa90882ffb099","sha1":"9ae9ecf7780f32f0cd78f6a37036dcd4b5a56a7d","sha256":"8304eef46c3d9d551820e68b3ed106e8d85803e123780d24e84aab0a22b485f4","sha512":"12d2d371d249fbcba8e8caffae99d601f5d100d4b152f9687aa1639e8795c1dc2b7f71b6900e7e9405d0e0b9f700e0a5950076aa060c5c153fd437e10f59da32","ssdeep":"384:vIIbGGpzQEZL/xNXB/35C7u8bkzcqPn25ZzIQN5BqbYBF75gdKhII1:b5QcJh8U/6VMYBFVgdy","tlshash":"8e72d1e2cb81cb586c0f9b891260b41a1efeeb778001391792b7d6737825942952df3a","first_seen":"2025-10-23T08:26:50.916962Z","last_seen":"2026-05-30T00:51:25.365104Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1094,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/2.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/2.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b7-3bb6\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMANh%2BHrjub%2BzcWwSU%2FvQKQu40qXC8n8z8TBHFk32LLIqqdHeFZrqItrRPy6yqWrohVjMrcPdOc5eSyPckyfNQCFA6Tt0RquCp47Z3dB%2BKA5DbhqdbTsWrRMXKxgGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83cd2456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"5f245ac9016657dfafcbdbf61b61e514","sha1":"4033c942a333f667ef26c5d45ed5e233bd83b8b9","sha256":"006d88e7389f56f925cdac325a2d6fc7956bbdcc30e46214bdd97b43274bd78e","sha512":"0be5306b2867b719a1b6736784ab063a6186d7187bb5378fa225e4f6eee5db31e18a56fbf05f2874f02e52c028e74bff6c3ab6854f9cdd821c80d7f8bc4baa3f","ssdeep":"384:LhEEnY6rtlrWDBX5s7eLvvRjx7HFYSTKavK4Pjwglq:NEEXrtlrWDHs7eLRt7Ha4vq","tlshash":"fd62cfd60b8be7d3044b62d8c4a127357756c050ac9d0c734abec2396bcb90f6263aa6","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.509384Z","times_seen":1170,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/style.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:52.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/style.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c5-102e0\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZFw9WvSWwOrXPJQn9xSekmPsuIYQngdW5qthdyBvVMChvZNDeqOB6HPMJ4Lamv2O0yGDouWtI3LwqdA4lw%2BHzWfro0kmzw0LrZ9wFlxTHBjM7xUshVDF%2FWyBfjDxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"091b4ddae061d4f8b50ac9c27a28f472","sha1":"e70043db371183b489167ffdc2ce9686e798566d","sha256":"24071d79592cf55208ad106781515b0ff91ad0b53cc8622ce91f68772b2d114b","sha512":"682849464b349cf21d88dec93749a48d1f33754219f96fcc14d135488932bff34f39deb66e00dbe2138b5fabaaa1161d48eeb9acc0f2acdbbb5ea5fb8e884bdc","ssdeep":"1536:s64DkpgvprtbrsnFrwv/7ujFfw7PnuvF6y:s64DkpgNtbrsMy","tlshash":"205354a55ab31c44780b85b89fee5b1433686093a10fccfcbb997248cf455d8a2a6f4d","first_seen":"2025-10-23T08:26:50.960322Z","last_seen":"2026-05-30T00:51:25.372672Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1051,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/footer-bg.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/footer-bg.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 11:29:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d67914-2444\"\r\nexpires: Sun, 28 Jun 2026 21:11:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IC5xCDB8VLV4fNLSZtyCeXmrd4nOxcaFgUui9IopHImQ9ZHrwwSfqCxsrdiABzFFN%2FL7K%2B2MC1u6wvc6vUj3ghJoKcVG7YWN3H2DN58QsK0LBQVErhxmCxj7N2Ssgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c4a56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1894 x 525, 8-bit/color RGBA, non-interlaced","md5":"d6fd5e4f2ad55d93d0558fc4f80e820d","sha1":"f72d3b81f8bfdc7febc41634ed7f9d70aee55bf8","sha256":"4568baa259cdeac5c1201984a61238c583e618a2fea2434ff10f3f238272f6c9","sha512":"347b03f94908b8b3da030a6b8c1ef279c58fff68a095468b7f713d6dc626051390a5a1f055cab72cf1a3cdd523378ceb3b897254fb2c3e3bca2da9a3d0b639ef","ssdeep":"192:G9fSsQyTzJmwSB+n5Kotlddddddddddddddddddddddddddddddddddddddddddy:G9fSsQmdNK08","tlshash":"b612aa3eae080e95e0215df35daf4d443bf61a8dd18d2bb2f7ac04229cdb66cd514d90","first_seen":"2023-05-20T20:07:45Z","last_seen":"2026-06-06T23:57:42.478732Z","times_seen":557,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 31 May 2026 21:11:52 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxDe1iD%2BDswOn5IJ8tpHSx6EMF7IMcKr3dr3I9J9UeBh8928kPwF%2BqrztH2WV6fx%2F10XedkFPQIe8g%2BxvoWbKUx5KV4q2kaIa6Y2Bhdauy2pKsVy0A27F5njtNCbGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:52 GMT\r\ncf-ray: a0387e7c3c4d56af-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T09:08:12.433678Z","times_seen":362909,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/zh.svg","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/zh.svg HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 26 Sep 2025 11:29:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68d67900-381\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3O9Wqmb0K0MxCA8444cjAfvtQnW9bSXGQZjhntPk6J0T71ceRCrdgRRbjiyFU1%2B61s2h59T5RvMsDECfdwDuypBNa%2B48%2F8ttL8O3WXAEDmJvXYBBog%2BuPuNRegOQA%3D%3D\"}]}\r\ncf-ray: a0387e83cd2256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":897,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e8690fdbf375d473873d3a23817d7b","sha1":"188a3e464c123a65d7f61fefc565bcf35fbff86c","sha256":"3fbaa6ac4e1b3c3193c195cccf6947a09c4dd0d9d5e8d48e58c582f94b31fd0b","sha512":"6c2a28a2dcd8073adadbbe9cf7ebc33146811070f7e22b15e9caad4a9477fb1a8910f1999cde1358ec0fd096a2647b55d420fff066a8932d8b73bf0eac52e619","ssdeep":"","tlshash":"da1100c4d364992cb44d47ca6f643ae192f370dfa786006cdc42f95456758eb1e08a9d","first_seen":"2025-05-26T13:00:36.989523Z","last_seen":"2026-05-30T00:51:25.3869Z","times_seen":12,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/7.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/7.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b8-3d7c\"\r\nexpires: Sun, 28 Jun 2026 21:11:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ch2VS2sDH3RBxiFWZz7hpL6YBdtI3Ru3R17OPshh5ef0rjYRXvp06ZrKxEBEJsbiJrq6P11GFvWbHJye94qEeOZHF4PcxAMdNGZAToR6GD8H3bmA022R3FYF%2BbS%2Byg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4e59e61b2a0205e09dafad24da174530","sha1":"0dc2adba2fbe4f1cd195364ef4f1ab4dc1641993","sha256":"269f20eb63db3ece8035886ebc69112ef94339da867d47f815237800555e508a","sha512":"8ee876a60c4d511beb1229678e34d5f91c34dd8eda4cf792dc521db76cb8338480b3c265181b3afb7446d3992e243d590a09494cb8e10fc4268022181babda28","ssdeep":"384:AwIpVA9llRR/+5BrSOxNbCGcIvTeSEHIGbi24fe:8Vul+5BrPtIIvTeSEHRiV2","tlshash":"e562d0c5d117242430b822b7c7fb936136e6b90fa3b1354b907a994112c74bec3deab5","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.519583Z","times_seen":1115,"resource_available":false,"data":null}},"time_used":1232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/3.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/3.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b7-4051\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3vEuni0gAxyCT1WlsxGBZYcuquq6aLRHZF6Dh%2B3A9rE4RvxcTeftOD2bHpT9NMeOt2n9b094bwhfQ3a0JNIDX2pk6AhcA1UKmcBWPVIfiYcdu2TCXT1t%2Br4RA0uSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"77ffe8b3dff795ea0734bf4b35a94357","sha1":"2d545ffb0877993dd227d528638a336cd3b9e32c","sha256":"ad37907e335e7c5d2692b682401f4520753ab539fadedf74962c6a004b3a179f","sha512":"fb4692716badcb1fce73addb8ecbd16c7158a8d0618b3bf3b1833661a3813d48500f8c96972c9cbc2f5ee9dbec1ce6f0450a6445a3ca9635fe2b3ada9a50b206","ssdeep":"384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm","tlshash":"5f72d07623938eb70eb9680d3f58eba84f17c540be5897a43176950c1532fe5ac4893e","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.505059Z","times_seen":1167,"resource_available":false,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/favicon-16x16.ico","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:56.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /favicon-16x16.ico HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nCookie: _ga_E8ZWY5SJ1V=GS2.1.s1780089114$o1$g0$t1780089114$j60$l0$h0; _ga=GA1.1.1930646578.1780089114\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:56 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 15 Oct 2025 19:06:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68eff0a4-47e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fs5MNK%2Bh%2BFCnzMRlAabaxWDLUpfMit4LAqNaeXJjITcw%2B%2FlxqbWGKkRy05uhFtVKDmuzkG31A9HHp7H07udcoLMszSZd430x62kX%2BzhI2otmKUtbdqMueYD2kwmhEA%3D%3D\"}]}\r\ncf-ray: a0387e8fddd656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"8110724652d968799e53d0717abf7b99","sha1":"24153694ca0485962d647ed6cad230bf04577806","sha256":"dc3ba60622969ef77620669bf4dc23035d33b0c948bbedb3f96b4a71b312e6a2","sha512":"abac65b2e2f886488d34f91e3f636192a4214b03bfd6f8d0b110829e59c7edbb6b0f20a2c39137a2cba781e8124340525acde20cd0a49e82685ce380ba6c194d","ssdeep":"","tlshash":"97217bc2a0c51985f09382b8275f3b745527cdd7ef91600127817c4b5eb1ad33794eb8","first_seen":"2025-10-23T08:26:50.867742Z","last_seen":"2026-05-30T00:51:25.393141Z","times_seen":10,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/media.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/media.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c4-1e20\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDc3bMktP1astM4%2FhE%2B1D5%2FCgwsrs9MNhrOLPhPpK0VIn2qjsdSb1HSCJHnyfBbEf9dl1SQxnL95yolcMTelgHPTss4GFL0DD6yth7WjQJXJm%2BJRNz%2FKTDMMv6ErLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7712,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4f01422e96cc292a5f4985347e50a542","sha1":"84cddb8314254d580f061eb2d41976562ebca030","sha256":"55844a9f724495951a8dfc02d74b0ee7496f4ee93bd9f5661f7716bdf949d624","sha512":"e9f2f9d401f47e3dee043df733a02f508fd3f07cb18358394dc51b0b005d05cfe3ae1abedac84e34b7c4ba9f4dd388b2e37eb012c44d0366dc5b6dcf84251c2f","ssdeep":"192:B0ncgGipnip3R/Wzo6ktJMiXakccefp1LmeC2z:BxWERQFu8","tlshash":"70f17d1a651227480833b764cfe24f1ef78b6833d24a90b63fdd96954fbb1829590f8c","first_seen":"2025-05-31T15:41:46.108234Z","last_seen":"2026-05-30T00:51:25.371023Z","times_seen":14,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/styleailo.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/styleailo.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c5-5fd\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YApt45FxF4Ks%2B8zhl6fWQWKf4Eio5RnhrbkcDeT3aXLJ%2Bm%2FcUQ16dtefkX1PXenpSDJI9HxM2uC8XHGSt2mq4iQueCGmdYDuvObvXuDAYdsTMNykZDeWel1Gq9SZLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1533,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e7e28f9fe00450deb179292bc8aeb7a7","sha1":"27cb3e6e89c1562a67d2ce9e59639a3c752689a8","sha256":"7357db2fe6af7eb25209b296b02b566b4fd6a0dfcabdb9121653f43ea524995c","sha512":"953e129880b62f1b95c825b77c0a604abd631a93cf373d52c769bd24bd0858daee93c60dcf3878eae9d2ca8f611e2ba66c6a2d1c8752cbf9ed3bdc6ddd496258","ssdeep":"","tlshash":"8e31ae8782530008fa2aa54deffe2b6513691583720be9ee3e6d318d6f8d1f1041478e","first_seen":"2025-10-23T08:26:50.962124Z","last_seen":"2026-05-30T00:51:25.389284Z","times_seen":11,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/extension_pc_zh.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/extension_pc_zh.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/style/css/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 16:00:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d6b88c-d044\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nkqjL235JNEm31L6%2FH9SwCnynpJGqTW47%2FXatOdumtIwWVGzliCFa%2FQ9B7loEwIXO2m8qwLSt01mm6gYEUWpA%2BLxarHxWHELCtIVgK4Q1uNomDG4G2FCM%2FW%2F9ZidA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e835d1456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 840 x 487, 8-bit colormap, non-interlaced","md5":"f4ebbd76b086c583a0271b487fe34b85","sha1":"b94f134b67fdf52ba1dee9a2f1708a9dfd325ba2","sha256":"8ac29ed4158743ccbbe2c0f179008198627bb0c053060c017f2264476837293d","sha512":"0083efa30fdfafa664e28042576be0acd2eeab68af2eeb70c6f9b507d63eaae811695ebd22310be9ca4b98924d9b29abe811b8b6f83f7a2dd2984a13134a4b46","ssdeep":"1536:gMPwGz33wW/wM+s3LHPYyE1+kn09/BETBfRO7hZ3:gun7/wMTYy2Vn0zETfq1","tlshash":"973302c431cc8bea731517665ccd1dc46a9fd0ade6f49b71cb8c984c082f928ea9c976","first_seen":"2025-01-09T12:25:48.783502Z","last_seen":"2026-05-30T00:51:25.374661Z","times_seen":19,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/an_zh.jpg","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/an_zh.jpg HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/style/css/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 26 Sep 2025 16:00:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d6b896-ea5a\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kOyJO3%2BeOQewh3P8PeX0PCGD9sLQh4pnhKgVrAsTxtNOxnyahDrw162KyO4yFPAfqVyFZZdArVCJQFHRRCXMrzMKwOTzvc0wfkQLGEkd3YFHurQ6%2FrmZ50%2BqI27zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e835d1556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59994,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 580x540, components 3","md5":"24f86f2261882ec1716f52ab63a2d86d","sha1":"45d0d4e93ead12682c2327f2bb64e07aa7a8dc49","sha256":"197ccf17aa1a5dfab4579f6fabc2fe08eea6338eb371e5ca2739ae6aa5361695","sha512":"bbc878801dfe2529a769058d8b610d3acca96b36a792679bb69f70b60af3bf108f789c1ea33a6884e70d959d5058d7b8f56e098ad7af2111bbdc213aca4abc47","ssdeep":"1536:bfUo8WOwj7BbCUHckhamIm5p14rpZpuDx0b14cl8A5lbkk:7Uo/j9bNc3X2Xdx3caER","tlshash":"ef43e0472b088ed3591cd3a67f422fb023c63779d60936d8e4205f5bf76876e58d822a","first_seen":"2023-05-06T05:42:29Z","last_seen":"2026-05-30T00:51:25.391693Z","times_seen":127,"resource_available":false,"data":null}},"time_used":1313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1055,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/file/t_main_Android_demo_2x.mp4","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /file/t_main_Android_demo_2x.mp4 HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 632104\r\nlast-modified: Wed, 15 Oct 2025 19:06:31 GMT\r\netag: \"68eff0b7-9a528\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-632103/632104\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dn8vVzxWs9%2FVlUEBjtrv3P2kjAHanYyaYXk5gmDx4AagLtVhao7xk106%2FCvP69HsawqxLoiUaCjtV8f1YfBcLqsIzEwWOltz2mslaODy2B%2BnOrK%2BvPjEFtQG9iyDJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0387e83ad1a56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632104,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"521b581e4bd1f14728b718510699ee63","sha1":"dbaac12b0a132f565e615ab06ccc3982882aa58e","sha256":"e2c6a707cacaaa22546205b92018fb237cf0e39cd8123ccf11bc05f37c37eb3d","sha512":"1cad28d83af0b20372871251949bbd9da38448705c528f2e261c1d4bd6cf1ad374342ac794e65ec486b1ea380011e7735735bd6510254c230b5ea41a09907db6","ssdeep":"12288:HNLD+FHr2pqfliFltHbtK7V3r4ajV3vlQ2rKfgJNfAp5bA6jm0dGH4i:HNX+FHypqflqHHbo7VPjplNrKI43bDaj","tlshash":"03d423d5d46c898ec7ecd7b2fc2408295d53b800220f25bff27c1fda91587d1a68aa29","first_seen":"2024-08-20T06:34:30.093748Z","last_seen":"2026-05-30T00:51:25.372109Z","times_seen":32,"resource_available":false,"data":null}},"time_used":2193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":1371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/new.svg","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/new.svg HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 26 Sep 2025 11:29:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d678fe-a15\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wAiDjABnON57zq%2BvvgDL7LnFdXqvj8HPtOYnoP0%2BMBdtNkvyV1KgGRT1FSf%2Bk4WVs6g3OZpQSPaMiYnRYu9Sp1nBSwAw9pNnrslgID8vAt3VBaJZaORj5V4g%2Fu1nNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83cd1f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2581,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb798aab65cdcaa1427bf5ae5ed3f797","sha1":"4fc36d9dfef5ac9b356935e9afaaa3e1119f5aa8","sha256":"f11b9063c830f9b2d4dd512ab790c1fbda1237e092488f30b751a2ff04aae233","sha512":"31a8fdbe159ce3baf3267454d1bc4a3db1af66a915d4a3423c95c45343d2ab6c4a2ed27291dd69a339e1cd4240600f3824f115c933a7709865c0259a9e722cb5","ssdeep":"","tlshash":"15510e60d39ca5fc901ad3a35f20998a3b3e22f4362e997d445e91a0c447a5ecf5bcd0","first_seen":"2025-05-26T13:00:36.972714Z","last_seen":"2026-05-30T00:51:25.378897Z","times_seen":11,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/5.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/5.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b8-7767\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pk3bSQOnNEwDiDsr6EOUymLz%2BYcgkNMkPV1H3NcSnrieOO%2FMlLsL25NCKd2crkqwGdHVDUVGI%2BYGLltQtM1DhaMsp9wsea6g7VB99wlT7li25vtC8A99bDRaqtacdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2756af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"0c6c45ee2597151fa5e955d11d2d38fe","sha1":"771aa6bbe2765cd2d6f754e14d5e12ffc476e939","sha256":"889ddfb8550bac935b0a02e52bef9d0950f0734d7a70661a0930a3d8e6a2f372","sha512":"bb4808e6b52f06991e9fbeb6e6e0d64b0afb4e87076a9cad8543494605cd2d0dc2f1d0007bf8c588c5e7682a87ea63f83bcc6f9c847dd60b3e3024cb39bbbd85","ssdeep":"768:pYweyGgLyxCaJ1leoVAqIuOlHPUfFbqqxViqR58IWE1:pX2eaLzOlvEAqxhR1","tlshash":"54d2e187ea13e50d3e4d83956dffb092007a172e49ee2dfb8871719217c6369413d9e4","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-06-06T12:28:49.516405Z","times_seen":888,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1134,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/8.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/8.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b8-350b\"\r\nexpires: Sun, 28 Jun 2026 21:11:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zf9vOrq6VSEu4mPTKuKjqO51wdT7KPgfW%2FMLVtduUuaHktIV3z9fwjm4UbPYM0qTitoh6r5SHhiHsdsPQKuVVIe01aAtCZhAExrcS4cDwQ83mdtF%2BECod1k1eqXkSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2a56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"eb46ced34f8cd5637a3ca911bd12f300","sha1":"a26b44e6e634e4d670a38549033d3539a981e415","sha256":"df53d5b90c9e669236f8593b7fc941a6da753ee8eec79a64c6955a4a67dcb45f","sha512":"8e015b01a7bc62637caf4c7138d256105fc77b227e0108224917b55ae813d7b1b2381371e0ef0b76a27fa9a0d7d2b02a96b0981b7183e433d3fb07a029488c33","ssdeep":"384:YJIBYQNLDhKyY9tWkQqHAKSTSMk8IduPQDvrz:YJIKYlYnWk/VS5k8Su4Dv/","tlshash":"8152c0500866b246bf19f23b7f683c57c7e154880a47e6369421eed180e78c7fb2a32d","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.522728Z","times_seen":1115,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/main.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/main.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 27 Sep 2025 07:56:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d7989b-4be\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50Y3dsoZqH%2BcvDOlteC2mYyoc9Pex%2Foc1xJjhdVLR%2BaFFotrJQRsxETA2qDFZ9Dp3xYGriEvxaovKLGQ6m%2BF71KpNsC14c3oTATxX9DioLdw%2FOi3A8LqhStDaiMFnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c4e56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4772067090116f5cdb5f56774f1631e1","sha1":"10aef7121b34c7e90d30d0d00a919d1cec6b1904","sha256":"8b265cc4e07ba5e0ed4eb78d5dd572bc4adb0109ad2591be02e67c814937713d","sha512":"31061bfa6634461cc44b65e5527a8f8062115861a4fe324385141ba5fec44f0a3a4cb99b494648daf8097016f16dbf74cc87f7417767f8e00ef63c02c5487596","ssdeep":"","tlshash":"f3219d19b5c8803f862f7769edfe1345693000176256e02e756cb1347fa0c668d6e8e7","first_seen":"2025-10-23T08:26:50.924438Z","last_seen":"2026-05-30T00:51:25.365671Z","times_seen":9,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/js/tgsticker.js","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /js/tgsticker.js HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Oct 2025 19:06:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b9-7049\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLPIawRnWoxgHglk1ZK0mP2IH0kS1%2FD%2BDi3OY%2FtjYbWIE855q8ofCBYBAlT8W6MMHankmT1boFy%2FZNqc2ANwwWfPw1daddHaq0pr0h4H%2FAufJ5EbNzmc25QCnWBguQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c5256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28745,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5681befa963b0ebf20d17ade24377437","sha1":"b6561dbe9d03683b74c1b8802b5fb872978690a3","sha256":"34032951bc9d9589dcde740cb6d0b14811c6cded88e37063586b0cb4cad059ef","sha512":"838e431d1c009315f328609bac8081994353963d917a1c7c9a72dbd7a37688c361ac3525e02ef47eacd3b4746bff22472ed2015172fece505903bf34ca9b15b0","ssdeep":"192:+paoN6CETKwSCyGUmrQyZ190RyzScUpyQLt8TroqwCCysTKcXWLclObFyBCqSCEp:zSNHmoTi5odAvt/2WT9","tlshash":"fed2cf4d89ab6165a423703dbbaf410632348007790edd30f90de768af9952f16f6bed","first_seen":"2025-10-23T08:26:50.897628Z","last_seen":"2026-05-30T00:51:25.376187Z","times_seen":9,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/shouye.svg","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/shouye.svg HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 26 Sep 2025 11:29:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68d678fe-221\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dn2Gxf4ZIJZRTlcKAo24zfms93nLHfzjLSzrp7EF9JEyudemXlBbxz0SMXmucwthLQDdwEtmI6%2BAiv5dKO8jUmdYgOZw3BUMdWZ7xf0ZpWXI1ABYba7GVa2ANVg48Q%3D%3D\"}]}\r\ncf-ray: a0387e83cd1d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86e28554e36bf8a3e62cfaaeedbc0040","sha1":"1e74fde15a187d1825db6fa26632cfea3ec7317f","sha256":"7f8c95c45d4793245d5caaeb58df7203bd72bad0951e0f29444c148ae5779795","sha512":"5542514dc12968ca4ae3880940ee440d8ac6fde922805af7fb439a2ed65e31db1e3114e5188db7c0c0aefed1643c7a01363237a84f1b6eaa1664f5980eff48de","ssdeep":"","tlshash":"e1f081796294a77cd05903885e688640531f5066b1c31a4cd4c94d71e280aa2df83a7e","first_seen":"2025-05-26T13:00:36.988785Z","last_seen":"2026-05-30T00:51:25.394703Z","times_seen":12,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/img/4.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /img/4.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 19:06:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0b8-4637\"\r\nexpires: Sun, 28 Jun 2026 21:11:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KP3E%2BMnDAxkXZdRUoGV5bSr2oA040ZoaKu9yBjjiDVzLwUqMt2VMqFCmPR%2FXe%2BBft7EXRiIPYD7tD%2BMx1pCq0KrhqGnH9Ja%2BMeHWEyjimJfvqi6eYAzSTkjpSDf8PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e83dd2656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"1d581b72d19bc828654229a0773a5300","sha1":"ff517c8bb4b37351ff3dd72f7ec66fc584e90d5c","sha256":"d2b3858e94ed122782de9028f668334438649e46e5d2c6d761e3359c8e3de200","sha512":"1b98b05c5f720c34d470af9606013e8dfef2c88225ab39dde906e4bec48f84851bfa9c68bd99aebafefac35c8f99861a58a40deb5c26cb74a5a19374fe7aedef","ssdeep":"384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc","tlshash":"8b82e0fa8aad835fa9b82500f17219d07d8277389cdc7d6dc07818e0bb245963b1f712","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-06-06T12:28:49.497017Z","times_seen":1169,"resource_available":false,"data":null}},"time_used":2621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/js/tgsticker-worker.js?14","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:54.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /js/tgsticker-worker.js?14 HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LspcioTPSkrDCrFW4NNLvrFQC2kLrEWMyY%2BzpSMvnWCTJyIVKvvu%2BnTQcsbONjhbc83mEFg5oaiU5E3Bg9kz2If%2B%2FER7gN%2FBijbv4VXdDu2ntPUbTLQKXkXtMl5O3w%3D%3D\"}]}\r\ncf-ray: a0387e83fd2d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/apple-touch-icon.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:56.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nCookie: _ga_E8ZWY5SJ1V=GS2.1.s1780089114$o1$g0$t1780089114$j60$l0$h0; _ga=GA1.1.1930646578.1780089114\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:12:07 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lsf5zmr6E2urmVvJaqxDeuDf0Lq4toDFGaXA705ot7Rbf6nci7v7ctIT8IRVchNaamTHG%2B1cVk3HThNmLSOl%2BOVIj%2BdWlyLjvfaYJRANljXGf5tnT%2B5qnbHifJJwg%3D%3D\"}]}\r\ncf-ray: a0387e8fddd556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-07T08:04:00.341292Z","times_seen":279435,"resource_available":true,"data":null}},"time_used":11299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/blog_page/2/","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /blog_page/2/ HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nReferer: https://cffeiji.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_E8ZWY5SJ1V=GS2.1.s1780089114$o1$g0$t1780089114$j60$l0$h0; _ga=GA1.1.1930646578.1780089114\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 06 Mar 2026 08:22:30 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAgzzXGdPOBNvOeZ9P9TMClJe3N833NIyMewTHSg2uPw%2Fio5sEy5yKtH0LdOTNqVoj7Q30UafBf%2FCxZRSVBIWBX6W0DLUzv5knsJoV2hsQlDV3TpOen5T%2FuSt%2FVXGQ%3D%3D\"}]}\r\ncf-ray: a0387e975e3956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37921,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (510)","md5":"2cff92d87b0340c9b2113a095ef0cef8","sha1":"d93e04c1c950937090c7db51c5728333d0474c0c","sha256":"9988adc1af5b9282507b848be154a3083797f248fce118d913fa86c0b3078409","sha512":"28173294db1194e7be394cb2e2da4ca5ec7c71039766a2c408e9d1d1cb3fbd1da613779064785a96d6657c990ed4564ab3fab8a539b05a2357719d74d66418d4","ssdeep":"384:v8FrFTWlZa7OrJBKIC7mqznjzkQjeKYtPwF9MHpx4JwtOi4pktOc4YdktOH4Jktz:v8FrFtyF4piqzjzkdxwnMHUKpvCm","tlshash":"2cf294214cf44863215282e66a76af0f6f96e937e91b0945f3be0bc65fc3d638c17189","first_seen":"2026-05-29T21:12:20.39147Z","last_seen":"2026-05-29T21:12:20.39147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/icon-78x78.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/icon-78x78.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 11:29:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d67916-30ed\"\r\nexpires: Sun, 28 Jun 2026 21:11:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwhNn846oDv0U4oCTebgtdTDiI43i%2FCGkMhYdlvw%2FaSyrD6kGfWSIv%2BDpo6hRj7hIq7tA%2B3tLEWolVjqcwQDA0h%2FuHXKm9VLDioy1vSN5Y8W25y2R8rL4hyAO7iTqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c3c4b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12525,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":2740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2125,"receive":615,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/style/css/styleali.css","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /style/css/styleali.css HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Oct 2025 19:06:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eff0c5-3f10\"\r\nexpires: Sat, 30 May 2026 09:11:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5Tvt1%2BEzc3OKtfhMEKuZHcp0hQ5Ue3OgTlnD0efQ3aXi1l62zpt7lB6gHPDv%2BSNXOve5oHuLy2XGOiUeo29pcOLdfnuuEwvZf5K1PQ9dHJz2p6XEzQUybxkczzn4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0387e7c2c4656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c38eb82ba6c27536b79b9dd981fd3da9","sha1":"5d688ec8c552f2514dce3ee03dc776971bd3f751","sha256":"2fa6e0e08c34ccf78eebd6ed318ce17564a7e01e60bc4a0b92bc611d03cb2c7c","sha512":"3c8b03f384258663197c2fdbfc4eab240de57db0ee6ed4071081d15e04912bc013b562a7462a353def3981350a3ca86fce756525a4c7673ab01118aa04d14dd5","ssdeep":"192:dCZrXCZxCZH84mCZh8uIaCZ8CZDELUb+CZLCZfOCZFCZdHhCZoCZih7GYwpCZMZ/:GXRv","tlshash":"1572472596210309013399581fe40b1bf2e894339b0b72f67fd269848fbb995d6e279e","first_seen":"2025-10-23T08:26:50.889662Z","last_seen":"2026-05-30T00:51:25.389873Z","times_seen":8,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/pcdownload.svg","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/pcdownload.svg HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 26 Sep 2025 11:29:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68d67900-27c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBkRG4h0AXI%2BbRSohJfSOHtZaF59vpbnxW7TPUEZb7pYog6R6472Ns4wyvc16OMoerih6wNl%2FklUQGQ%2B46%2Bfi%2BndfuV7vXOB0CpoR0G7qT8mVXLkw7sdWvCVbuk5Qg%3D%3D\"}]}\r\ncf-ray: a0387e7c2c4756af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2808fd55b5aa41fa27b49699fcc6501b","sha1":"82ed78264742822da2b3ad4c10813565ce324fad","sha256":"427e81d293e6bbe6832721d43cb4bdb3bd60eb41cc7951a7f27d65f6b06b8d22","sha512":"9fe6ace4457a1af4fdff6cd0b65dc01277a6e7951ae6b4c47ec2e838d5bdd38e4ff37b9b5c6955a1a9e51b7a55096f6281e89bc88801ca33e7ba893fc7297a52","ssdeep":"","tlshash":"44f0dd0cc399ac28214b43c496ba1be1214d10dfc4c2a3bed8825470d17edbd3e9177d","first_seen":"2023-10-27T01:28:36Z","last_seen":"2026-05-31T23:37:12.92325Z","times_seen":34,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cffeiji.com/image/andriod.png","fqdn":"cffeiji.com","domain":"cffeiji.com","tld":"com"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cffeiji.com/","date":"2026-05-29T21:11:53.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cffeiji.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 15:28:16 GMT","end":"Tue, 07 Jul 2026 16:26:57 GMT"},"fingerprint":{"sha1":"72:15:17:61:4D:44:B4:1F:15:90:40:66:5E:66:4D:FA:BD:35:F4:3B","sha256":"27:1F:4F:39:E3:A9:87:1F:FD:0E:F5:A2:FC:86:63:82:00:50:69:52:EF:5B:5F:BB:58:8D:C5:65:38:59:FF:C1"}}},"request":{"raw":"GET /image/andriod.png HTTP/1.1\r\nHost: cffeiji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cffeiji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:11:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 440\r\nlast-modified: Fri, 26 Sep 2025 11:29:06 GMT\r\netag: \"68d67902-1b8\"\r\nexpires: Sun, 28 Jun 2026 21:11:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7ksDoIBPhjAz0qC8IER5dnfZ8HCYAFI8L66Qk8tXUA%2FlYp%2FTfHv4pkUGFiEnmARv2iuZC5%2BJuMJiqXMouvhlYvJc%2FsH2gilubHoICC%2B34MxXKOUtrZNkZp%2FX5AW0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0387e7c2c4856af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"60be153f8ad1df025ff1885ba64190e3","sha1":"331aec755477784375e8ba624d597da317fa1cb2","sha256":"12db3a240831b32d9b95e4e3b4d664e241e529fe02ba2b3e7c464948303c1c71","sha512":"6f7d66dc3012b508ecbd5eeb4796a63b860ca52c176ca5a0be1aea2fc9e388e464ad4719f281e0d4510c3faf023fec31a07214bb71824417f9472e8092b3159e","ssdeep":"","tlshash":"5ff0dc8e5a4b2e08ee3d064318fb5dad230c22b628d4da5307a8b5f38804415c6a0a16","first_seen":"2023-10-27T01:28:36Z","last_seen":"2026-05-31T23:37:12.888105Z","times_seen":34,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"cffeiji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}