{"report_id":"df40e34b-f86b-4685-a6f4-838f18c0ed18","version":6,"status":"done","tags":[],"date":"2026-02-14T11:27:37Z","url":{"schema":"https","addr":"register-pippin.com/","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"104.21.94.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"register-pippin.com/","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"title":"Pippin l Official Airdrop","dom":{"size":8324,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1101)","md5":"57d59800890a6b5d8a93090455c378f2","sha1":"bf31483398c526440bda9f39c408d4f0267cf998","sha256":"4906ac4d67abd5eb0efa0b888427c1c2e7b197abff7fb207d86202c8d711c3fb","sha512":"7abe8bed0eeb07a8d3bcf7d8376872798382ca3ee693868bec42d5722a3bff88df841431925e4550fde12f1d095d1edbce61f39e75531797edd4717d2b3ca568","ssdeep":"192:F5f7NdNqt292nMI04LHKPc1RcWiBtIErUqU7GVzK2yhpGKSYdawr:zkwgPLH+c1RcWkgqU7Gc2yh4eJr","tlshash":"f1029691c8f091726082ca95ee9b6b1e3f556063f79e8105bbae0bc49fc6d83ec0755c","dom_hash":"domhashf14b89c065963f3d39eab646d52e2660","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"register-pippin.com/","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"104.21.94.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T11:27:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pippin.love","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2025-11-23T13:36:29.603513Z","last_seen":"2026-02-13T07:03:34.021708Z","alert_count":0,"request_count":2,"received_data":4609,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"register-pippin.com","ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2026-02-13T07:04:46.263647Z","last_seen":"2026-02-13T07:04:46.263647Z","alert_count":18,"request_count":9,"received_data":1186987,"sent_data":4259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"register-pippin.com/script.js","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eabe79ae26a4be3755be64d8e9a1bfbc","sha1":"41ea8556477e66fc6970a1abffb1306e5fd22aa3","sha256":"c2cfe9d9c3962ae5f52a40711befb5e88eaf9b8d0a8c92d53e30d57e3d13cec4","sha512":"dae0d617bb83106bef24f8ee13c87b1fa6351adbb928b4859802e4dccaa47accb926bd647a8c3d95a4b131c2b76566ca2e7b702f729d378738e397a1adc901fb","ssdeep":"","tlshash":"a951f07b315024305efe2bd69b570718f625a113394385a9beec46484fb5f41acabecc","size":2921,"data":"","first_seen":"2025-11-23T13:36:34.231106Z","last_seen":"2026-02-14T11:27:39.432205Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/primer.desktop.umd.js","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4290b48746e1ca87e92b540d872f3e31","sha1":"1393546dc51e8faf625e2507e8a0df55c03c7ebe","sha256":"2a3a7585a4396d46abf3ba2bbbf6cff3f9e2bbd8cb18c7e0629f57fb84237c33","sha512":"61b8e6267a8b81b7868d3a63627b771b878cdb9bcb53b3401f33ebdce202dc3644a12bf0d64ac6d716e48ecefd1c07bcaa10523ea73da418f47db30204899106","ssdeep":"6144:yMgB6oemDH9E44pI1zjcq+GjJkJlHnwXWRTH:PgDuXI6DGjJkJ+GRTH","tlshash":"e4a452c75cc5285cc36663e71819504fb59317a9cbcc6bc6af2db6daa0ea80111e7fc2","size":468251,"data":"","first_seen":"2025-12-20T04:26:22.714102Z","last_seen":"2026-02-14T11:31:17.555755Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9011844c11b03fc2118cb8b50a8e35e7","sha1":"c125a3ca322f5e84727f07356334a138a3d77ce0","sha256":"c159c1d84630661ded9665c6da91d5ba3e372fb1cca4eed6da379e3751885247","sha512":"bf4ec7e61443cc541e1ea1b052190b5dcce06d08a03877febabea0ef7316d984aee4715bf9c88a9b496c6939d9f25c4fddf9f8edb51262f8678c8a36e7c9960d","ssdeep":"6144:cW+9AAC3EtlO6XleZKDzlSMUG/JkBtBB+dGfTr:HXXGsKg7G/JkBkMfTr","tlshash":"aba475c75cc6285cc36677e71c19404fb5931badc78c6bc6ae2db69aa0ea40111e7fc2","size":461193,"data":"","first_seen":"2025-12-20T04:26:22.717447Z","last_seen":"2026-02-14T11:31:17.629637Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fqrcode.adaptive.esm.js%3Ft%3D29517807%26u%3Dzd6PSfzCuYzRBNZkGDY5MjU2NDUxMjhjZmYzYzM0MDI3ZTdiZE1VpuBueJiG7M8SuQ","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pippin.love/assets/images/pippin.svg","fqdn":"pippin.love","domain":"pippin.love","tld":"love"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pippin.love","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 18:02:10 GMT","end":"Wed, 01 Apr 2026 18:02:09 GMT"},"fingerprint":{"sha1":"2A:E8:8E:DF:77:EF:F9:0C:7F:54:FF:B2:5C:68:6C:2B:55:F4:E1:2B","sha256":"ED:64:2D:19:F3:71:20:4F:31:8F:B4:B9:54:E0:45:77:1F:F2:06:34:AB:CD:61:5C:8F:AB:AC:3A:74:C0:9F:C9"}}},"request":{"raw":"GET /assets/images/pippin.svg HTTP/1.1\r\nHost: pippin.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 17 Mar 2025 23:58:05 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"67d8b70d-86f\"\r\nexpires: Sat, 14 Feb 2026 11:37:16 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 63AC:34960:1C65778:1C9B8FF:69905C11\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771068436.230937,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d33c40fd6268bd9b4c4383aba51f4be4d6194903\r\ncontent-length: 605\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2159,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66b1938a5247a2553998b300e71c4f1c","sha1":"a2eeb47a2dd8401f46f42657a6874834da3a276f","sha256":"c589f3ddd8b64e04355b9d01a47d0ee39795690cc287a17667c602abff5a6b87","sha512":"7d6ded886b5ee6d9054125cccf77ae41549704e5ad4be07637e32b883bd5c563ee49ba8166d5ee359de85478520995afa4cbe74c38c6dbd8e91591f3d9fcb9c4","ssdeep":"","tlshash":"81412a64a30c1679f62f8368ebad34ab523f70ddd71c20991d901ab0a0942ba5db71ec","first_seen":"2025-11-23T13:36:34.243259Z","last_seen":"2026-03-21T06:21:26.574511Z","times_seen":15,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":134,"dns":98,"connect":17,"send":0,"wait":143,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/secureproxy?e=ping_proxy","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-pippin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 11:27:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THBD%2F63sXYHzTJIS%2BdZrEXHt%2BdMCQDAUpAxG2Oq1jb7VIwGexh5AHfhXLOvj2VuJh2BWcgUz8zEJvFttXOTSA4QjfwafZw3Z3EHaSm5SGQHkPzI%3D\"}]}\r\ncf-ray: 9cdc37211bd48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-27T00:57:24.612114Z","times_seen":8961,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T11:27:15.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:27:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 10 Dec 2025 09:42:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLK1Xd7aBTO7Q4fHR0WoEVHCTewpo5INLxhl%2BXWqEJFd1P8TG%2B9W8xkvEwl0bl1mwNf9j%2Fyba1mXB%2FYQwBXOgWTJzt7HKkJATqNGmfkLNKcmbsU%3D\"}]}\r\nage: 131180\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdc371c7bd307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8535,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1095), with CRLF line terminators","md5":"1b288abd9bd4af3fce5398b21c48cb1a","sha1":"495288b6449642a959047bb6bd226e924fe18be1","sha256":"c030cf1daac140df38d9372d1585fc56e03bf40ace1a4b4b2d49f24754e7f671","sha512":"8e78dae932e60769cf0e236438801fa19162229e8af2c3db38b133d2f4f1d0e8eec44e5bdf7e6e8bb9dde44b77269079ad185d859c9de39188669c5daaff1ff5","ssdeep":"192:XANXNiF32yrTR4LHKPc1RcW4wcIErUV6eQMD0Mw6Sh/GZw:DGtLH+c1RcWEgV6eQe0Mw6Shey","tlshash":"230294b0c4d0902260b3c6d6ee9a5ba9fe550053e78e4209bbee17d7afb6e41ec03550","first_seen":"2025-12-20T04:26:22.709765Z","last_seen":"2026-02-14T11:27:39.428225Z","times_seen":6,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":58,"dns":26,"connect":10,"send":0,"wait":25,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/primer.desktop.umd.js","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /primer.desktop.umd.js HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 10 Dec 2025 09:42:11 GMT\r\netag: W/\"69394073-7251b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXO%2FwI3EK03W84OT%2FxcirwxxM2HRdXHU0IgbtdYVc9ZF4N8QFbXynd3UBSeGfRCsnIj7B6xrJO%2B%2BGR4og2IzJ%2FXevKIj%2BSeCYU3vg4rXRXgeW7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc371d8ae78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":468251,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65159)","md5":"4290b48746e1ca87e92b540d872f3e31","sha1":"1393546dc51e8faf625e2507e8a0df55c03c7ebe","sha256":"2a3a7585a4396d46abf3ba2bbbf6cff3f9e2bbd8cb18c7e0629f57fb84237c33","sha512":"61b8e6267a8b81b7868d3a63627b771b878cdb9bcb53b3401f33ebdce202dc3644a12bf0d64ac6d716e48ecefd1c07bcaa10523ea73da418f47db30204899106","ssdeep":"6144:yMgB6oemDH9E44pI1zjcq+GjJkJlHnwXWRTH:PgDuXI6DGjJkJ+GRTH","tlshash":"e4a452c75cc5285cc36663e71819504fb59317a9cbcc6bc6af2db6daa0ea80111e7fc2","first_seen":"2025-12-20T04:26:22.714102Z","last_seen":"2026-02-14T11:31:17.555755Z","times_seen":8,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pippin.love/assets/images/pippin-logo.svg","fqdn":"pippin.love","domain":"pippin.love","tld":"love"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pippin.love","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 18:02:10 GMT","end":"Wed, 01 Apr 2026 18:02:09 GMT"},"fingerprint":{"sha1":"2A:E8:8E:DF:77:EF:F9:0C:7F:54:FF:B2:5C:68:6C:2B:55:F4:E1:2B","sha256":"ED:64:2D:19:F3:71:20:4F:31:8F:B4:B9:54:E0:45:77:1F:F2:06:34:AB:CD:61:5C:8F:AB:AC:3A:74:C0:9F:C9"}}},"request":{"raw":"GET /assets/images/pippin-logo.svg HTTP/1.1\r\nHost: pippin.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 17 Mar 2025 23:58:05 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"67d8b70d-470\"\r\nexpires: Sat, 14 Feb 2026 11:37:16 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 5FEE:93E33:1BF4131:1C2A0D0:69905C13\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771068436.230426,VS0,VE149\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 900ebfe267dd8f2747454e7af6572cc5a168d90e\r\ncontent-length: 431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcbb3cc8f0f84e3c58f54f5aca42c861","sha1":"6b8250c472cc40717999ceff524d07901fb3d844","sha256":"4f532d3e02096933b109dd0f7bd6303d1ca6e11f488baa0b5076ab1f332c1181","sha512":"76483288e765a69002e74a61cc1e73caa4f6004418b609f2ac6021b7a38456bb010e377144a0e7bec4e4f69d6704c500ca0eea5de559d19bd521b9fb5cd0a828","ssdeep":"","tlshash":"fb21f9909a1929a4ea55816a9f183039522bb6d766072045384e2170bf903dfaff7fec","first_seen":"2025-11-23T13:36:34.225048Z","last_seen":"2026-03-21T06:21:26.579772Z","times_seen":15,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":135,"dns":97,"connect":15,"send":0,"wait":165,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/script.js","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 10 Dec 2025 09:42:11 GMT\r\netag: W/\"69394073-b69\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rO2%2FxKxlqM%2FkT0lEz09eKaolg1kuUkxAkiEBT%2FGosnkqyTzyugUZCyGZfPYQd6otbHekmbSQIJPkKHPmDP8DLYJoi1a%2FPmSakS0FMFujU%2Bkhqqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc371d8ae88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"eabe79ae26a4be3755be64d8e9a1bfbc","sha1":"41ea8556477e66fc6970a1abffb1306e5fd22aa3","sha256":"c2cfe9d9c3962ae5f52a40711befb5e88eaf9b8d0a8c92d53e30d57e3d13cec4","sha512":"dae0d617bb83106bef24f8ee13c87b1fa6351adbb928b4859802e4dccaa47accb926bd647a8c3d95a4b131c2b76566ca2e7b702f729d378738e397a1adc901fb","ssdeep":"","tlshash":"a951f07b315024305efe2bd69b570718f625a113394385a9beec46484fb5f41acabecc","first_seen":"2025-11-23T13:36:34.231106Z","last_seen":"2026-02-14T11:27:39.432205Z","times_seen":6,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/img/cta.mp4","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /img/cta.mp4 HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 864681\r\ncast-mode: default\r\nlast-modified: Wed, 10 Dec 2025 09:42:11 GMT\r\netag: \"69394073-d31a9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-range: bytes 0-864680/864681\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OoVMIgTFuoHFS5MN0nCork9W4N8rKKUHKw5fGo3FBo62WC9pFweEBfEwP7qK8DlhxQDDNKEVjNXzh7P3QoEI%2FXOX%2FmPOygy8VIY4oE%2FWk1aDH0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdc37219be18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40137,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d9cfd6de9476233cc65dee0df5c55137","sha1":"994e4bb071cd58d53c7dbc2d28eb996d1d71fb77","sha256":"8da99c96faa3451090829f47d1979990062e9a5634751c477ed9e6ec01c84cd4","sha512":"710def58f5eee5ba53326b8f6d90e2f956c0c512a4f9e27ecfb6dfb08e674c38b62d07d9f0823bca19236e77ffa8d76fcec03ec61a427e7a2ba73385661aea76","ssdeep":"768:pzWG5h5ojTGwAy2Uwe9mzswz2r0WXQvityhtjJHbQX1zzTa5H:pz5ouwAQwCgs+2oXvvhrHy1zzTaZ","tlshash":"6e033860f345414ec4738bb419b223397696dca9b05ed34bb6bf2b1ea8524f17b028f5","first_seen":"2026-02-14T11:27:39.432994Z","last_seen":"2026-02-14T11:27:39.432994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/img/pippin-logo.svg","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /img/pippin-logo.svg HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:17 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 10 Dec 2025 09:42:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69394073-470\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukdwinC5lfG2avCSjZUv%2F9Nwc6bdXC%2BEE22ZQWhJeKNFVimaxHHOClpuZfj4wGmarAINc9IsEb3nomqrUNSXrJxKx9Av22HBOqdHz40b3Z8Dprs%3D\"}]}\r\ncf-ray: 9cdc37228bfb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcbb3cc8f0f84e3c58f54f5aca42c861","sha1":"6b8250c472cc40717999ceff524d07901fb3d844","sha256":"4f532d3e02096933b109dd0f7bd6303d1ca6e11f488baa0b5076ab1f332c1181","sha512":"76483288e765a69002e74a61cc1e73caa4f6004418b609f2ac6021b7a38456bb010e377144a0e7bec4e4f69d6704c500ca0eea5de559d19bd521b9fb5cd0a828","ssdeep":"","tlshash":"fb21f9909a1929a4ea55816a9f183039522bb6d766072045384e2170bf903dfaff7fec","first_seen":"2025-11-23T13:36:34.225048Z","last_seen":"2026-03-21T06:21:26.579772Z","times_seen":15,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fqrcode.adaptive.esm.js%3Ft%3D29517807%26u%3Dzd6PSfzCuYzRBNZkGDY5MjU2NDUxMjhjZmYzYzM0MDI3ZTdiZE1VpuBueJiG7M8SuQ","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:17.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fqrcode.adaptive.esm.js%3Ft%3D29517807%26u%3Dzd6PSfzCuYzRBNZkGDY5MjU2NDUxMjhjZmYzYzM0MDI3ZTdiZE1VpuBueJiG7M8SuQ HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"9c80a-go5AMoyo/3QPEJDm9j4XDBWSpiw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=qrcode.adaptive.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 11:27:19\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: c4cd05d3561b207ab002f7364e63b6b1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=526hR9vTDlv%2FlMT%2BWVNYJdxg%2BwzY0HNwqxLmNpXyS4tQCF4Wy8XeMMmG4AOeZRbYy%2B0egjQ9z2tC6TXitBySr9cByT9VSx8auvad9Ni5Q5HtQCI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc37234c198be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":3012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2941,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com//secureproxy?s=%2Fjmpd%2F","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:20.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-pippin.com/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://register-pippin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-cYyQI+PV/izZ2H0LBfO1iitfS2o\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771068500539\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 11:27:20\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 93e8712afff05a38c8ac19a344d11eb3\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCAM0W9%2BMTC%2BUtw0MXiBkB5Tk2OeHkL6pgR9I2hZ3Wx1igrku4ewtWnaFVPU53Oy36ZXjif%2Br%2B9u%2F1ukiX1%2FyTxqfdpxMSJKw9Gj8X6N9dEmB0Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc373889e58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d545a3a37203bc1da4397201b5e88fbf","sha1":"718c9023e3d5fe2cd9d87d0b05f3b58a2b5f4b6a","sha256":"ed111120792ba77b7ebc733437991a5aaa7cc099565c3c45a6163262aff57588","sha512":"e9073b133484e1f84287125479aa671ff546bf4eb0705f628feeb2372856255a52487435245f5193a3a829866a84177924dd451b1e995de787b52b01001a9be1","ssdeep":"","tlshash":"f6d023cc16e041c79e0178ef01f9a07f033e3db03a601812070000212660572bc03d01","first_seen":"2026-02-14T11:27:39.435638Z","last_seen":"2026-02-14T11:27:39.435638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-pippin.com/style.css","fqdn":"register-pippin.com","domain":"register-pippin.com","tld":"com"},"ip":{"addr":"172.67.223.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-pippin.com/","date":"2026-02-14T11:27:16.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-pippin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 10:34:34 GMT","end":"Fri, 08 May 2026 11:32:00 GMT"},"fingerprint":{"sha1":"9A:06:1F:9C:FB:15:6C:47:D4:C2:F8:83:B5:40:D5:8B:56:BB:6B:0B","sha256":"74:EF:46:B4:D8:84:34:0E:82:E7:1E:CF:56:79:3D:A0:8A:B2:A7:9E:DC:F7:66:9F:8F:2D:2C:99:BD:FE:CC:FC"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: register-pippin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-pippin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 11:27:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 10 Dec 2025 09:42:11 GMT\r\netag: W/\"69394073-3ae4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JjVVPkByN6DvixNajJIRVqUk4brNTClZoND%2B8aU7vbnMa46avi3ZGnHsbEJk9ayttrei7DIO4q6iP1SeW6oxt3doD8NzCBBonQHwl3rZdMIZ6p8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdc371d8ae68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0b55df83888134f9d1f74177f7a926b9","sha1":"46517c23dbe76ae26675287701ed9e933221804b","sha256":"0f68f060bb091046af4055f4d6ba04ca27f078472619bfc90ae7409c92b8d8d0","sha512":"1b137fec78fe84dc1302c0c10293aefc9ac63253863e79183aead1e8d192011bc723c0d0b59cae5999de14506bb243a3ee7c672fa19d854e7cccb5b8ace146f7","ssdeep":"192:cACJB9Dh/9cSWUXChYJ9E9iMG2Nr0+vxZmB20ir9zhyrt9Be9w51+ykE9Ec9NeMC:7szhZxC","tlshash":"dc62de24ea04184a7473e3786fb3d758e3e68063d34666ae7fd4a1508ff526086a5fcc","first_seen":"2025-11-23T13:36:34.24799Z","last_seen":"2026-02-14T11:27:39.437294Z","times_seen":9,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"register-pippin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"register-pippin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}