{"report_id":"dfd0d826-20d5-4cdb-9e96-31b92d3b2f62","version":0,"status":"done","tags":[],"date":"2026-09-25T05:41:03Z","url":{"schema":"http","addr":"aurex.cloud/","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"aurex.cloud/","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"title":"AUREX // NOC-01","dom":{"size":91273,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3620)","md5":"79fa8eee3bc511bd2e895c022c007399","sha1":"a918bbf2b68027e2707e132ec022e2a299f205a1","sha256":"1d3eca279f4f1c25849d2f9bae574248b416da683aa28588710de2bd9d0e2d7e","sha512":"552143ee2659dc36adeb1492d9bcf1aedc23ab77c3470146ff6b199bf37daec50f063f3714e5afaf52044dd4121d72350596f772cd506c9f9112a80e0bc4dc1b","ssdeep":"1536:PwJPutmAxamG5vOFbX/+++1OKLWTcyxcwGb5saoSlV1M8+H:2P+x/eyqwlShMXH","tlshash":"b7931960a2700237a06341d9b7de775e32e5e01be907965876ec43958fcffe6686b08c","dom_hash":"domhashda0054571147420c7338391146965e58","first_seen":"2026-09-25T05:41:12.053984Z","last_seen":"2026-09-25T05:41:12.053984Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aurex.cloud/","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:41:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":20559,"sent_data":623,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":8,"received_data":236796,"sent_data":4392,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aurex.cloud","ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":32,"received_data":228997,"sent_data":14790,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"api.coinbase.com","ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":61255,"first_seen":"2015-06-05T10:29:43Z","last_seen":"2026-09-22T00:30:40.46331Z","alert_count":0,"request_count":1,"received_data":1930,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aurex.cloud/","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c61af80c233587257cde481ca64804c8","sha1":"51f411696ab2810c8842c8bac05534937af3a25e","sha256":"1c03cde1a53038ff07030441f04cd49afe86978c05163d58b2495b9a9d57211b","sha512":"09b822ae9f62c40298a3fe48f4885e926d6a70062d8b0ed71d08c295a91eaa409bdab40b714fc64de7a62396603e968063c7729d63b5f123023e86b2887e2fe8","ssdeep":"768:2cLKZMMWTWbyxcwUdbMnrtSAGvsaoZsS4lhD1M8ybto:7KLWTcyxcwGb5saoSlV1M8+o","tlshash":"e3f22a2172601b3685a201fc978f331295a96023be47eca46a5d82c64feff6c54bf1dd","size":37227,"data":"","first_seen":"2026-09-25T05:41:12.09322Z","last_seen":"2026-09-25T05:50:22.675284Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.159Z","timestamp":1790314830159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 308828\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14708,"size_decoded":15521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-09-25T11:06:58.369082Z","times_seen":4849,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:47.834Z","timestamp":1790314847834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:46 GMT\r\netag: W/\"786-lS71cHcw+PpzOku1HByTWaF+khc\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::2ht94-1790314847840-e6936c32aee1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c04304f5a7449228ae3380c003a9350","sha1":"952ef5707730f8fa733a4bb51c1c9359a17e9217","sha256":"479911c32ba5318ab47fa2ba1609574d65e403d7d16cc8029461aa9e6499e6d7","sha512":"39a9aa15d10c7fbd89d6a9e433dc1bb58da1c29fdeb05348ce5237824970423df4c64925c6aa2db436b645d967caa752bf4792fa54e06479e8abe927a76f16f4","ssdeep":"","tlshash":"5841ed0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1594962559e","first_seen":"2026-09-25T05:41:12.057595Z","last_seen":"2026-09-25T05:41:12.057595Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-01.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.278Z","timestamp":1790314830278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-01.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-01.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"67681ff959d9919a93ffd90b1204adef\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mxtk-1790314830283-ca2f9b533f70\r\ncontent-length: 7598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7598,"size_decoded":8110,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"67681ff959d9919a93ffd90b1204adef","sha1":"d2ec9f242d8f1168e0be0352ceddfb0da9cb9393","sha256":"3894bad82685982992a9409ea81757a4c8f6c4a2e98ee132b4eae48dccbbd9b7","sha512":"1a1aba92d83454640f9a93632cb84c39d221bc6dd1a11eef3ff8cc60eaafd2dbe2aad1d7a40c59e341471d608cd580c143aab334a733e3991755b3e6bec5dfa3","ssdeep":"48:TeNK4hpbZbZvYL1vt4+9POu34QPTeLMWg7ehF9rTM0711m3Ljc/AYiZl2gts:yRVle42GuIQrcMWg7eh3wcY90","tlshash":"38f11710170096bb916f5063038e74b969b463c7ebf103788063af1d2bda69f6e31f90","first_seen":"2026-09-25T05:41:12.058839Z","last_seen":"2026-09-25T05:50:22.665419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-02.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.279Z","timestamp":1790314830279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-02.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 73286\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-02.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"b91071d04f63d0033816390869e22a9d\"\r\nlast-modified: Thu, 24 Sep 2026 09:19:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xqg2x-1790314830284-0c1718003592\r\ncontent-length: 7754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7754,"size_decoded":8265,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"b91071d04f63d0033816390869e22a9d","sha1":"fbaaf711ebd2fb22413ed0c6b1fc30f556387a86","sha256":"88ba35c424690e4ca80c6c2cac12e5c3edae68986bf8a5d53c16e3fa3222c4b2","sha512":"997d278c2a8b6f71e6fd966a263b41d96dca3044025e899835423c6edaa7a6bf36a9fb3c5b8fc0080bbd19385e7df61e3457a5804f30a2a2b90e074d9a110c6b","ssdeep":"48:T/PhUjoo7+5SPr/9+uuk+3s2Jf+re6TUSQmFuUlCIzKJGmYaltodWuVEiBu:FioU+kPB+uuxc2UQmplC4QG+vodW0Bu","tlshash":"37f14660471086bba57f5593038e34b865f827dafbf20239c065af4d26c698f9e35f81","first_seen":"2026-09-25T05:41:12.059939Z","last_seen":"2026-09-25T05:50:22.651838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-07.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.284Z","timestamp":1790314830284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-07.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-07.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"461e03f7b1fcfc09a31346b415b25825\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s2dn5-1790314830289-ce17e2a37e59\r\ncontent-length: 8061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8061,"size_decoded":8573,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"461e03f7b1fcfc09a31346b415b25825","sha1":"bb7a1e1b9c36657ea7dc38e7605a6fc9af0c1f83","sha256":"95c2c3920d83c000aabd4ad4a7322eae16348586d6a5273cf6518952efbb6220","sha512":"df61db55165102db79b0c6bdbc5efe4deedcf9f307f57df3c7481753d193a2a1c5bd2a920388fa2d17c29816b61232c8d1f2843a55f702613f765fb1345bcdb1","ssdeep":"96:1MCaxefeKzbSjik51RTEGgmM7sYNVRleL1cIvBpP0RHrNP:1MXxJKijB1RTEGgIqrlIvBEHF","tlshash":"71f17d6c73da9abad5fd9931078f05baa86c41c20abd2310d0fe8e2d580ec9c5f30d95","first_seen":"2026-09-25T05:41:12.061276Z","last_seen":"2026-09-25T05:50:22.673779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:43.032Z","timestamp":1790314843032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 2\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:41 GMT\r\netag: W/\"786-hOh4uMJ1pBW4ehVu4+7DRIphKvo\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::2lxwx-1790314843040-2e3889a52247\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b1bfba93b522db956084d551f03c0269","sha1":"84e878b8c275a415b87a156ee3eec3448a612afa","sha256":"96a1838fdd5ffbe2141ca20326deb057ce500a6dbb02a1e91a8e9040c7978ba2","sha512":"e5810ce8c6e8e2a0231a7a0e8f5fe6389e6b3c754f01f0689927db44190ce3552056e3edf769cd3c3da6e9574ff67b7e3220592f693b2566d01d3ce222af8fad","ssdeep":"","tlshash":"5f41ed0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.062909Z","last_seen":"2026-09-25T05:41:12.062909Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/art/1.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:29.974Z","timestamp":1790314829974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /art/1.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"67681ff959d9919a93ffd90b1204adef\"\r\nlast-modified: Fri, 25 Sep 2026 05:40:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::jpz5m-1790314829984-37df44013768\r\ncontent-length: 7598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7598,"size_decoded":8101,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"67681ff959d9919a93ffd90b1204adef","sha1":"d2ec9f242d8f1168e0be0352ceddfb0da9cb9393","sha256":"3894bad82685982992a9409ea81757a4c8f6c4a2e98ee132b4eae48dccbbd9b7","sha512":"1a1aba92d83454640f9a93632cb84c39d221bc6dd1a11eef3ff8cc60eaafd2dbe2aad1d7a40c59e341471d608cd580c143aab334a733e3991755b3e6bec5dfa3","ssdeep":"48:TeNK4hpbZbZvYL1vt4+9POu34QPTeLMWg7ehF9rTM0711m3Ljc/AYiZl2gts:yRVle42GuIQrcMWg7eh3wcY90","tlshash":"38f11710170096bb916f5063038e74b969b463c7ebf103788063af1d2bda69f6e31f90","first_seen":"2026-09-25T05:41:12.058839Z","last_seen":"2026-09-25T05:50:22.665419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.127Z","timestamp":1790314830127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:17 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nage: 308353\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":35517,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-09-25T10:16:25.644854Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":26,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bodonimoda/v28/aFTQ7PxzY382XsXX63LUYJSKSKg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.157Z","timestamp":1790314830157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/bodonimoda/v28/aFTQ7PxzY382XsXX63LUYJSKSKg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46260\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:34 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:32:10 GMT\r\ncontent-type: font/woff2\r\nage: 308336\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46260,"size_decoded":47073,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46260, version 1.0","md5":"0492c86153615ad16cfd36af4eca123a","sha1":"004112122d6202db68adf25f09db0ddaac57e45f","sha256":"c032219ef636f7b4932f7d1dc91bdab602c970f090770b546bea4effaab3463c","sha512":"63cccf1b3d87c57064ce879144bd07667b3ed666385dad30d36deb4f2c705fa8b336aed9042745fd54a7aab4e3c67f1996eef73fceeb1de5f0950e38e6348980","ssdeep":"768:7QaTNhIXwjiHm2R0FJhY76RAmzRox6lLDSQzrnSNs3ACuJjYfU3IRBTqYdwpmoXK:P3kwj8PG3hSgO6lLxXw+DuNY8COYdCm3","tlshash":"1e2302bcebb70f4b262e0354e2b811b1167572bb890b7d940fa2e2970cf510a55cf417","first_seen":"2025-06-23T01:48:25.343787Z","last_seen":"2026-09-25T11:05:41.962917Z","times_seen":428,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-04.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.281Z","timestamp":1790314830281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-04.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-04.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"b48ae7640f39ba69f34e96bfae9b34f3\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2ndv6-1790314830286-4c019690083e\r\ncontent-length: 8200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8200,"size_decoded":8712,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"b48ae7640f39ba69f34e96bfae9b34f3","sha1":"29883d3eb93bde57b4115e0f4061833769235acb","sha256":"66cf2626fcc60a1816bd57ac00c7f1dadf1a6fd0db033433763dec2969b055ed","sha512":"992965a432414d01952816febc799d611cd350ccce80c5f9f161b47748d667c49b31ead13ac4de17e624ee57159119bd715e8220d02da283f6435e31692d7831","ssdeep":"96:Jw567j9p5DnbtEE3u+inwo1LAoBEgAO/6ej7GtOzw1:uaEoFinwohBEgAO/6Zp1","tlshash":"2902356cb39acab9599c5971078f547ae9ac52c61abc2330c0fd5d2c094e86c6f31f82","first_seen":"2026-09-25T05:41:12.065176Z","last_seen":"2026-09-25T05:50:22.66397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-06.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.283Z","timestamp":1790314830283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-06.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-06.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"ed11a3785eee9e29a05e9f6e0a8eb594\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::29p7j-1790314830288-f68f6c7b9e2c\r\ncontent-length: 8096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8096,"size_decoded":8608,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"ed11a3785eee9e29a05e9f6e0a8eb594","sha1":"3da141de3b49d92fd44f052b30f6e7a600309eb5","sha256":"8a4cf908ccd7f339d71b8dcae4e987c7fff9642aa8fef0fa3f8b9c6949e34577","sha512":"24486853fcccba3a5184df2cfbf333e23d2c94a7d8732e6bf8989a415e303bd6849c83dd3bcd00d96cc047719d17361af35e1bbd13bcd13a1cae739a653c81d3","ssdeep":"96:59CYH6k/U6cuTIw8iJSQxWegj3YZg88WO6Rte5j0/0k:faDLuTWAxWeyIWXWOgepHk","tlshash":"65f15a140300877ba41f05a7138e60bd79b523daebf643399121af0d2bca68f5e75f94","first_seen":"2026-09-25T05:41:12.066313Z","last_seen":"2026-09-25T05:50:22.6279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-08.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.285Z","timestamp":1790314830285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-08.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-08.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"54bee69c279b0f3cc92e06285209d723\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vwwfk-1790314830290-9a37deeca6bf\r\ncontent-length: 8311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8311,"size_decoded":8823,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"54bee69c279b0f3cc92e06285209d723","sha1":"f11deffcc76ebccbcbd157e24cca71eed1c9bdfe","sha256":"85f05b18d8ab1995af8e9b635cb59c7f980cf95a4262aeef6df38da1ab7433c6","sha512":"b375cd1ad21ee03676a1219bda51ad2774d2716e051c10b02b27bfe7c3aaf2a906afbfbb0801d55774f59d9148092a201d3513b26d7a0bf60a2a4bf8008527ae","ssdeep":"48:TikpZe66NBuoIi1S1j8YRz3igFipy51bYqs6TE8iEvK4opy9xQ0r9KUmJ0a4z92+:Wd11hYRes/51UcZK4DxQuKUG0X92+","tlshash":"cc028a1db34e99ba689c5834438f04baecfd16d74ab96614c0ba5e3d080ec9c1f75e86","first_seen":"2026-09-25T05:41:12.068651Z","last_seen":"2026-09-25T05:50:22.656149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-10.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.286Z","timestamp":1790314830286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-10.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-10.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"07062c995250813f7539617ff37e19a1\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g9bt6-1790314830292-a2458ead386b\r\ncontent-length: 8367\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8367,"size_decoded":8879,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"07062c995250813f7539617ff37e19a1","sha1":"e6d9c75520da644f677b5c32a75653360cbe7555","sha256":"1e34b826d43b55c1e372933a97d26b2eb959d454029e08d27f824b9e329a95ea","sha512":"2095ebce15194507440540c3a77eb8ff3e7a8c94e238578d6421d30d72b74ff15fb006b04bdbe94c65cabd2b5a59fb76f51a9cc68b95e1d2b4b994e999f8ba9e","ssdeep":"96:Q24sSu1j09xWX+VPeqMmLt28Q/E4MvLKBNlL2r5+ze+1Y:FJSwIxAF4U8yLMmLZ8IVY","tlshash":"13028e2df75adab5a96c9930039f05b99c6c52c50ef82221c0f99d2d481fc6c2f70f86","first_seen":"2026-09-25T05:41:12.070413Z","last_seen":"2026-09-25T05:50:22.653117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-12.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.289Z","timestamp":1790314830289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-12.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-12.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"444fb221beab92773501163fca26ffeb\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::skcxb-1790314830294-bbb756fd152b\r\ncontent-length: 7742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7742,"size_decoded":8254,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"444fb221beab92773501163fca26ffeb","sha1":"5d80e7670bcd6b0d68c07851717a1ee7e740ab05","sha256":"694016ebcfa27907c1f8c5613b19ec5ac48a69cd01e2dc0fa8e52f2c7a9f0d4a","sha512":"e4a9d07863cb6ac701b3311aeeb0106a79e106c841d89308b19ec399d93fac0474d5d4cd6cc6990591d8e8e58fb4425d4796c9b74bec5ff9d273b5b256750930","ssdeep":"48:T25VU1UYX5bLAvwPw1Zp1DRTcJsckgylHYGwdrPg+ZvvjTjdSTcMdVWhjk2:aWtLAvw+/FyOlJWr1FHjIo/k2","tlshash":"91f12960034083b7956f4057038e25b969b927d6ebf24679c0126f0d2acbb8fad70f45","first_seen":"2026-09-25T05:41:12.071661Z","last_seen":"2026-09-25T05:50:22.657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:36.625Z","timestamp":1790314836625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:35 GMT\r\netag: W/\"786-oNNuPM6G3Z35dFp/4Od2MRstnOM\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::6dc25-1790314836659-66773d08c4b2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"332333044968e3b65a7123edc50ac19d","sha1":"a0d36e3cce86dd9df9745a7fe0e776311b2d9ce3","sha256":"9bd6ce36f7345aeec3dc248ae8569b121c74e5e9ebb750b6df86e14fc6e769a2","sha512":"e12727cd07c89bf140ab34723455e490e8fd32224198fade06c83652abdd12d1419a79bc7b2ff8a520fbdebe26e81a2da0dc0fe0d263b600e64b2344f0ae03c4","ssdeep":"","tlshash":"1b41fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.072886Z","last_seen":"2026-09-25T05:41:12.072886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:38.236Z","timestamp":1790314838236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 3\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:35 GMT\r\netag: W/\"786-oNNuPM6G3Z35dFp/4Od2MRstnOM\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::56pt5-1790314838242-8f71a8feb48e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"332333044968e3b65a7123edc50ac19d","sha1":"a0d36e3cce86dd9df9745a7fe0e776311b2d9ce3","sha256":"9bd6ce36f7345aeec3dc248ae8569b121c74e5e9ebb750b6df86e14fc6e769a2","sha512":"e12727cd07c89bf140ab34723455e490e8fd32224198fade06c83652abdd12d1419a79bc7b2ff8a520fbdebe26e81a2da0dc0fe0d263b600e64b2344f0ae03c4","ssdeep":"","tlshash":"1b41fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.072886Z","last_seen":"2026-09-25T05:41:12.072886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:39.832Z","timestamp":1790314839832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:38 GMT\r\netag: W/\"786-XrPkvAN+1mM7fHtgqbuwC25L9V4\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::wtjnc-1790314839838-a7661873a7b8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cc17b02a39238e93cc48f8a8cc8d75b1","sha1":"5eb3e4bc037ed6633b7c7b60a9bbb00b6e4bf55e","sha256":"e5276bced26d715694097f5ba8a6d9db3aeee6a3e9a5649b24c577f5e491f4c8","sha512":"00024fb72e572ad7d85666409fd7739cbed41c59b4910dd771e53a9538d5b37351ac4f94980ffb3c607c1097d9b2e1638986dbd6c56636cb024b1640621c58ef","ssdeep":"","tlshash":"6541fe0c6f1f2ffcf15bdb8166de256b042b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.073867Z","last_seen":"2026-09-25T05:41:12.073867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:55.834Z","timestamp":1790314855834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:54 GMT\r\netag: W/\"786-j15deBzy2dFQUJeFvfifSH8AeYE\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::r5wqp-1790314855841-b82c6da29d1d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6a73457d63e5ed3b56e6c6e33b5457b","sha1":"8f5e5d781cf2d9d150509785bdf89f487f007981","sha256":"e381727484ba01c5873c56a3db2b69a4664c723185effd71bebd22adec94d0e1","sha512":"44e1e5a44895f7c009467ccff138fddac79561a9af15180bc5a5f6121c1639ce8ebf1c1b28522e931187a5f47010045bfe68dbcd1e5dadb6700404595f2d533b","ssdeep":"","tlshash":"b041fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.075187Z","last_seen":"2026-09-25T05:41:12.075187Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:31.822Z","timestamp":1790314831822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: W/\"786-SjgLh5qCUMhI4ZjM7iWmQPgKFwM\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::w8lbv-1790314831828-e1774789a64a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42d6671bed2f2ba6041237f3e64a9b57","sha1":"4a380b879a8250c848e198ccee25a640f80a1703","sha256":"90fa5706da1d04f8dc7bd4fba4a51abc838564c37aa83929fe1d23f3ed895300","sha512":"af990c296ce283acf7a49d2465c0b96551e1dcb0d05bf169235670ae4ecdae48f4b0e33a03489a0a1a1c6cd5f26e9d5c3456bd7e236268de7748085297bd3ca1","ssdeep":"","tlshash":"9741fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.076503Z","last_seen":"2026-09-25T05:41:12.076503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbase.com/v2/prices/ETH-USD/spot","fqdn":"api.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.215Z","timestamp":1790314830215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 04:59:01 GMT","end":"Fri, 11 Dec 2026 05:58:45 GMT"},"fingerprint":{"sha1":"30:04:49:35:57:AE:7B:04:F2:40:DE:D2:60:C8:5F:17:BA:29:6C:BC","sha256":"B2:2D:EB:D2:6A:07:59:BB:6A:FD:66:D1:7B:66:AA:F2:FC:11:A9:1D:4E:1B:6B:C7:10:59:01:19:9E:24:77:0B"}}},"request":{"raw":"GET /v2/prices/ETH-USD/spot HTTP/1.1\r\nHost: api.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-headers: Authorization, Content-Type, Accept, Second-Factor-Proof-Token, Client-Id, Access-Token, X-Cb-Project-Name, X-Cb-Is-Logged-In, X-Cb-Platform, X-Cb-Session-Uuid, X-Cb-Pagekey, X-Cb-UJS, Fingerprint-Tokens, X-Cb-Device-Id, X-Cb-Version-Name, X-Subaccount-Uuid\r\naccess-control-allow-methods: GET,POST,DELETE,PUT\r\naccess-control-allow-origin: *\r\naccess-control-allow-private-network: true\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: no-store\r\ngrpc-metadata-cache-control: public, max-age=60\r\ngrpc-metadata-content-type: application/grpc\r\ngrpc-metadata-vary: Accept-Language\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntrace-id: 3004237426003850742\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-forwarded-for: asset-stats.cbhq.net\r\nx-forwarded-port: 8001\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __cf_bm=M4NfZhA1.XY9pNYvSHVy5iW4T96DbwqTbq_ohBH4tXk-1790314830.2322958-1.0.1.1-JXWn_rQ8ZjuRF1z_XVSqycXo5Wej4U6r2QmNFc.BX8ChIPJG9yq3xs9S0btCeYP3IvNySV.lEdBYeAZU1XSmb384LmuHcRVIMfZBTegqUcRJBaltXXRMa.wTelZNBI2h; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Fri, 25 Sep 2026 06:10:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d38OifQEOF52aeGR65RyB%2F31UwrkU4KbjMhEJ1SGecpd9XjzyCTMDYIyztr9TP96XeQShAwhwKiXwvEQRxa599o4iKtoctxEZdOrP7vKbhxzozi0KpZceHlCRU5tLOCx05c%3D\"}]}\r\nlast-modified: Fri, 25 Sep 2026 05:40:30 GMT\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\ncf-ray: a407b1c8f85456c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"M4NfZhA1.XY9pNYvSHVy5iW4T96DbwqTbq_ohBH4tXk-1790314830.2322958-1.0.1.1-JXWn_rQ8ZjuRF1z_XVSqycXo5Wej4U6r2QmNFc.BX8ChIPJG9yq3xs9S0btCeYP3IvNySV.lEdBYeAZU1XSmb384LmuHcRVIMfZBTegqUcRJBaltXXRMa.wTelZNBI2h","quoted":false,"path":"/","domain":"coinbase.com","expires":"2026-09-25T06:10:30Z","raw_expires":"Fri, 25 Sep 2026 06:10:30 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=M4NfZhA1.XY9pNYvSHVy5iW4T96DbwqTbq_ohBH4tXk-1790314830.2322958-1.0.1.1-JXWn_rQ8ZjuRF1z_XVSqycXo5Wej4U6r2QmNFc.BX8ChIPJG9yq3xs9S0btCeYP3IvNySV.lEdBYeAZU1XSmb384LmuHcRVIMfZBTegqUcRJBaltXXRMa.wTelZNBI2h; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Fri, 25 Sep 2026 06:10:30 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":60,"size_decoded":1946,"mime_type":"application/json","magic":"JSON text data","md5":"a70d62df1cc4da91135c65992bb87fb0","sha1":"04f6af24b6f2a3fe6d87921fb55bed349c2fbbdd","sha256":"ef6e3b1d9b4857a35cd8b32447f6a8593985d96cee9c4d9df6c2fc0f0f6fca3f","sha512":"63e320d433d3df411c2530c957cedb4f2b220b203211604a8762423eb8f781f109aab6ed6fe3ce765d711d75859f2db4f5e2d5dbaeba9496654b27e76082a86f","ssdeep":"","tlshash":"6ea00214b8bc47f5d4505086b8400138e65e210515ca499341a9051442542adb385f31","first_seen":"2026-09-25T05:41:12.077903Z","last_seen":"2026-09-25T05:41:12.077903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":139,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.130Z","timestamp":1790314830130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:07:53 GMT\r\ncontent-type: font/woff2\r\nage: 308828\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14888,"size_decoded":15701,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14888, version 1.0","md5":"b1c8a895f5fd3fe6cbf5b4cf95c58d87","sha1":"d32f0e0701ac62043840131a800ce717a86e4ee2","sha256":"01d285447409c8a588692162439a038b8cbd7871309ee20267b0d2d91c6e8e22","sha512":"8e5f116c757f033e001d1622798ef0e689d860b6e4102c6d760398ebe653c6ec257bdcee0d8ec1ca7cf5663269ae36b79f8d44b5a0a81298c816ac5ed9a020ed","ssdeep":"192:0oK9+lgWZm57bYBeze/iw+Lp3HIpY4uY8rHcT1DHC4cIIK/Cgb2n5ZXwMEBHr5F3:9K+nro0uYQ6cECVnTXwRtQnyYS5qb/f2","tlshash":"f962be3785690217eb1df96f6133e205ccdede83877bc23262b2955b01cfbea5019255","first_seen":"2025-09-19T17:22:27.509445Z","last_seen":"2026-09-25T11:06:58.363481Z","times_seen":2814,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.160Z","timestamp":1790314830160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15620\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:44 GMT\r\ncontent-type: font/woff2\r\nage: 308828\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15620,"size_decoded":16433,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15620, version 1.0","md5":"5a2ce7798732476dec03a9561de231fe","sha1":"ce9a5ca3a874da9201c2630c5cb7bfaa9688c052","sha256":"0d1f0b8d0722224e32e9f28261bdc86c79115be73444ae5eceb73976a1bcdf83","sha512":"5c4ebd97feaabdb478b615990f286b114ee3b76ce43dfe4122b4e6ec998ae3d4110a4a893b65f6ba81c25da0d3ad7e5a5221fb8c8efb58e5d06e9b3c890f9832","ssdeep":"384:AcHslrQJgsgNQhzVr/oaqSeH04dAM4PmV:7slrULvz9/NqSZLZOV","tlshash":"4162d010270e7176dc461378dd56c9e30476ffbec8120f6b7e91a9a258c5fd4722127a","first_seen":"2025-09-19T17:22:27.512197Z","last_seen":"2026-09-25T11:06:58.36858Z","times_seen":2637,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-03.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.280Z","timestamp":1790314830280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-03.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-03.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"a0e072a77e3da02dcb94fe1e17794d13\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g9bt6-1790314830285-a459837a5f17\r\ncontent-length: 8122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8122,"size_decoded":8634,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"a0e072a77e3da02dcb94fe1e17794d13","sha1":"c658bd0351f4f03ab4f5b3af0eda04ae1318d599","sha256":"0f779aa55810e78d7ffb1943eb07db02a33a30f6be3f070bff058d2b1f156911","sha512":"6d0b24699b580615afd8d73385b160d866f500f57a6df62a7435d6b640228b60e2b7105faf81331bdcfc064e3a237a613a79be2f433f7ea61dcc016b2c239ba5","ssdeep":"96:INk2AIySH99Tfv7AT/GOcrzuEYHfb7jJ7GT:INnAeH3TfjAT2rzuEYHT9GT","tlshash":"dbf158104704967f952f14a3479e65b874b823daebf603389016af1c3ad9b8f6e70f51","first_seen":"2026-09-25T05:41:12.081289Z","last_seen":"2026-09-25T05:50:22.639135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:44.633Z","timestamp":1790314844633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:43 GMT\r\netag: W/\"786-0NzRzWBrZgvfFDJkelob6UZ7nic\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::4ng9c-1790314844639-7a508bb49f31\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fc6abe80c818976b10c8462726f15484","sha1":"d0dcd1cd606b660bdf1432647a5a1be9467b9e27","sha256":"b3c4dc30ed0a2b701a27ecf6417c63255f24a258eb842e29a35255991353461a","sha512":"609b4aa71e4bd2d2963b9cbaa10ad2892beb541d13a3d1545dd1bf7a89e207588fdc46d74d66de822cd37fdd848b8d5454ef34b0c4825e2113bb20a375771ffa","ssdeep":"","tlshash":"cf41ed0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.082388Z","last_seen":"2026-09-25T05:41:12.082388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:51.035Z","timestamp":1790314851035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 2\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:49 GMT\r\netag: W/\"786-8uhet2Gm+NuyaQlmQdu91ggBAYw\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::r72fv-1790314851044-831b620643fd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"60ead2c6c26bc56b13bcd8abb679d628","sha1":"f2e85eb761a6f8dbb269096641dbbdd60801018c","sha256":"c7685390a8d8a70dd477ad9c166d61614285c837e07b4877f7e88c560859b990","sha512":"978cf7f23ac1f52a062746b0123aef5bf2bab966363c61c1895f0bbbce5a8b8bdf7b587a1790fd7ef45c551a0a9ee9601b79a263243981d76973925e6b18451b","ssdeep":"","tlshash":"d241ed0c6f1f2ffcf16bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.083491Z","last_seen":"2026-09-25T05:41:12.083491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:35.023Z","timestamp":1790314835023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 2\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:33 GMT\r\netag: W/\"786-8g9LY9wPqInRAEe07+JZssEsl1A\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::r5wqp-1790314835029-fddacb58a394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d51fe9333e423cc330be2a9bf1553b49","sha1":"f20f4b63dc0fa889d10047b4efe259b2c12c9750","sha256":"791c94d77ea7f6d4ead2c5e1a3392738ee559d10955cf88e25a8bcc73707c135","sha512":"78e1244b4c24d9b427f8c86f5f8605a11d583805a2546129245ebfaf3a8159bc2a23d21dbe68acd44d4bc2bfbf4e933a3fef8ff0d1faee998d92ae8b9c9e5858","ssdeep":"","tlshash":"0e41fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa39c0e1554962559e","first_seen":"2026-09-25T05:41:12.085059Z","last_seen":"2026-09-25T05:41:12.085059Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:49.435Z","timestamp":1790314849435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 3\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:46 GMT\r\netag: W/\"786-lS71cHcw+PpzOku1HByTWaF+khc\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::4lcmz-1790314849442-9d4c69ffb418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c04304f5a7449228ae3380c003a9350","sha1":"952ef5707730f8fa733a4bb51c1c9359a17e9217","sha256":"479911c32ba5318ab47fa2ba1609574d65e403d7d16cc8029461aa9e6499e6d7","sha512":"39a9aa15d10c7fbd89d6a9e433dc1bb58da1c29fdeb05348ce5237824970423df4c64925c6aa2db436b645d967caa752bf4792fa54e06479e8abe927a76f16f4","ssdeep":"","tlshash":"5841ed0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1594962559e","first_seen":"2026-09-25T05:41:12.057595Z","last_seen":"2026-09-25T05:41:12.057595Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:52.635Z","timestamp":1790314852635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 1\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:51 GMT\r\netag: W/\"786-LdZBLhpgWd5TEQed6Z9T+6rgSo8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::iad1::cf2qp-1790314852642-91089a71f5a4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1239,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81e7711746c1e3f63609d340483a1469","sha1":"2dd6412e1a6059de5311079de99f53fbaae04a8f","sha256":"e0b4339376538b7c0604b01ca294ff8ade9e6ebc7bab8b2ac17567b14c2bee5a","sha512":"19f62aa5d8cbe63d55e8a08aadde2270e9115e9cf8123244c367f581b91a58c7f5a0982a0cd423ef04cf4682f71a8e7baf66e974915488f2688dcdfa673c132d","ssdeep":"","tlshash":"8641fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.086047Z","last_seen":"2026-09-25T05:41:12.086047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.164Z","timestamp":1790314830164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:17 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nage: 308353\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":35517,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-09-25T10:16:25.644854Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.277Z","timestamp":1790314830277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: W/\"786-SjgLh5qCUMhI4ZjM7iWmQPgKFwM\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::pzfw6-1790314830282-4eaa72a10f42\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42d6671bed2f2ba6041237f3e64a9b57","sha1":"4a380b879a8250c848e198ccee25a640f80a1703","sha256":"90fa5706da1d04f8dc7bd4fba4a51abc838564c37aa83929fe1d23f3ed895300","sha512":"af990c296ce283acf7a49d2465c0b96551e1dcb0d05bf169235670ae4ecdae48f4b0e33a03489a0a1a1c6cd5f26e9d5c3456bd7e236268de7748085297bd3ca1","ssdeep":"","tlshash":"9741fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.076503Z","last_seen":"2026-09-25T05:41:12.076503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-05.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.282Z","timestamp":1790314830282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-05.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-05.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"7b49c779881730e93513f724816bee54\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zqzkb-1790314830287-c4306f804179\r\ncontent-length: 8028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8028,"size_decoded":8540,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"7b49c779881730e93513f724816bee54","sha1":"9aedde7666f9c31df4a956147d57871e35096142","sha256":"d0b901100258bbc51d75344c31e77e83ac22ce314524ad1abee48de03af394ef","sha512":"f9c6b525f9725f080d93782e9a99af8b1ef95e2610f7722510fecd4e1fde584f02587ae912a9ce29622c999f3870d0c7c3daa59577d622ad494d5e19fd91f6f1","ssdeep":"96:kcYrI3+lRaL2doDKiYaxK9BG8YNNeshHkzF:k7I38R7RtaxK9BG8ue8Ha","tlshash":"43f1692107008677a52f11a7538d257968b933c7ebf2023d8062bf1d5ad765fae35f81","first_seen":"2026-09-25T05:41:12.087019Z","last_seen":"2026-09-25T05:50:22.669651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-11.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.288Z","timestamp":1790314830288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-11.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-11.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"4839368fd289507c8e622f380c06db99\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mxtk-1790314830295-0325f1df9fe1\r\ncontent-length: 8683\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8683,"size_decoded":9195,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"4839368fd289507c8e622f380c06db99","sha1":"61cb8174fc4ec5f30ef5920886614920a4028b2b","sha256":"10ad78dcae8751b66b0036e22047e2fd5926136877ea19f1e53f3592168139bc","sha512":"e0c2fc0ffc35262549b221da04badaa5d78b8e123e572f5c329e76ca1be5b0d6c172601d8844bfdc9a60fcd938c6d709d5728d5ad58fcdc28dce20a6c5263832","ssdeep":"96:BvJKOjOXUB+PYoNkiIsTPUBc53oWDWNBYdN0ORR0pWURox0eZpQDS:BvQ/kmYoNkiDZZDWN8RR0QgCN","tlshash":"ff02971cb39b8eb594ac9834035f15b9edac12c609bc6225d5bf4d3c194fcac6f24e86","first_seen":"2026-09-25T05:41:12.088084Z","last_seen":"2026-09-25T05:50:22.666603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-13.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.290Z","timestamp":1790314830290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-13.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 630994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-13.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"c7ffdd48d98c818f75d10575f8be0f0d\"\r\nlast-modified: Thu, 17 Sep 2026 22:23:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zqzkb-1790314830296-71084e633de3\r\ncontent-length: 8322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8322,"size_decoded":8834,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"c7ffdd48d98c818f75d10575f8be0f0d","sha1":"bfd79819d12456af55ea23eee40f3035f2c97c18","sha256":"6b443ea08e7ef0b3490681e21a582b18553bfad74feba93681e20d2a7f6297fd","sha512":"205c9cced2b6ec38f21ab32443e09d959db93c8d2f77619a689c718a4598fd653a09977e5f447f7359569e1c4928f426463be28ee06d5d5a86d65a520548b93d","ssdeep":"96:QTQ1cyYwQsMayoWdRMVv3sDwv1R4XZvaiIAQmJJUwZcpk7:2QayGsMqeq6PymYwKpk7","tlshash":"5402522cb3d9877aa9bc883557cf05bab8ec12c706751250c0bb9e5d544ed9d2f20e82","first_seen":"2026-09-25T05:41:12.089087Z","last_seen":"2026-09-25T05:50:22.667533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:46.233Z","timestamp":1790314846233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 3\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:43 GMT\r\netag: W/\"786-0NzRzWBrZgvfFDJkelob6UZ7nic\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::s2dn5-1790314846242-fe5203beac75\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fc6abe80c818976b10c8462726f15484","sha1":"d0dcd1cd606b660bdf1432647a5a1be9467b9e27","sha256":"b3c4dc30ed0a2b701a27ecf6417c63255f24a258eb842e29a35255991353461a","sha512":"609b4aa71e4bd2d2963b9cbaa10ad2892beb541d13a3d1545dd1bf7a89e207588fdc46d74d66de822cd37fdd848b8d5454ef34b0c4825e2113bb20a375771ffa","ssdeep":"","tlshash":"cf41ed0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.082388Z","last_seen":"2026-09-25T05:41:12.082388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:54.237Z","timestamp":1790314854237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 3\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:51 GMT\r\netag: W/\"786-LdZBLhpgWd5TEQed6Z9T+6rgSo8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::9fp58-1790314854244-95d6adc571b8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81e7711746c1e3f63609d340483a1469","sha1":"2dd6412e1a6059de5311079de99f53fbaae04a8f","sha256":"e0b4339376538b7c0604b01ca294ff8ade9e6ebc7bab8b2ac17567b14c2bee5a","sha512":"19f62aa5d8cbe63d55e8a08aadde2270e9115e9cf8123244c367f581b91a58c7f5a0982a0cd423ef04cf4682f71a8e7baf66e974915488f2688dcdfa673c132d","ssdeep":"","tlshash":"8641fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.086047Z","last_seen":"2026-09-25T05:41:12.086047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:40:29.369Z","timestamp":1790314829369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 700530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:29 GMT\r\netag: W/\"31c6e0f4f9097a77a098f2e088ab8da4\"\r\nlast-modified: Thu, 17 Sep 2026 03:04:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tglnd-1790314829430-93dffb4ed6c5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":70150,"size_decoded":24242,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (712)","md5":"3269e7870c0f98576017985226694dfa","sha1":"edefdee5d6a1da36f7315f2dcc2794af171766f7","sha256":"aab6cfb3ca6857b7a6638c3b498fabb024c33e41b5f8072bb1cd83e9f60a4531","sha512":"0278b82e4793fe13390927cebb6cfdc299bc127bfd3bada3ed027b9f8dfdcd8fef26d52a33c5daa85d53a45c2980000838ab037e7e00039aa56026a2fe56b33f","ssdeep":"1536:1FJPutmAxaiA5+OPoS1OKLWTcyxcwGb5saoSlV1M8+L:5P+lmyqwlShMXL","tlshash":"13631a6162305236a563449877cf775e62a4f003fd07daa8b99c81868fcfff915af188","first_seen":"2026-09-25T05:41:12.090173Z","last_seen":"2026-09-25T05:50:22.67216Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":11,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:33.423Z","timestamp":1790314833423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 3\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: W/\"786-SjgLh5qCUMhI4ZjM7iWmQPgKFwM\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::vwwfk-1790314833434-364f54e291e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42d6671bed2f2ba6041237f3e64a9b57","sha1":"4a380b879a8250c848e198ccee25a640f80a1703","sha256":"90fa5706da1d04f8dc7bd4fba4a51abc838564c37aa83929fe1d23f3ed895300","sha512":"af990c296ce283acf7a49d2465c0b96551e1dcb0d05bf169235670ae4ecdae48f4b0e33a03489a0a1a1c6cd5f26e9d5c3456bd7e236268de7748085297bd3ca1","ssdeep":"","tlshash":"9741fe0c6f1f2ffcf15bdb8166de256b002b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.076503Z","last_seen":"2026-09-25T05:41:12.076503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/api/state","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:41.435Z","timestamp":1790314841435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /api/state HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurex.cloud/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 3\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:40:38 GMT\r\netag: W/\"786-XrPkvAN+1mM7fHtgqbuwC25L9V4\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: STALE\r\nx-vercel-id: arn1::iad1::2dxrw-1790314841441-4de2e6877adb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1926,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cc17b02a39238e93cc48f8a8cc8d75b1","sha1":"5eb3e4bc037ed6633b7c7b60a9bbb00b6e4bf55e","sha256":"e5276bced26d715694097f5ba8a6d9db3aeee6a3e9a5649b24c577f5e491f4c8","sha512":"00024fb72e572ad7d85666409fd7739cbed41c59b4910dd771e53a9538d5b37351ac4f94980ffb3c607c1097d9b2e1638986dbd6c56636cb024b1640621c58ef","ssdeep":"","tlshash":"6541fe0c6f1f2ffcf15bdb8166de256b042b32365d8c368783cbaa38c0e1554962559e","first_seen":"2026-09-25T05:41:12.073867Z","last_seen":"2026-09-25T05:41:12.073867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurex.cloud/leg/leg-09.png","fqdn":"aurex.cloud","domain":"aurex.cloud","tld":"cloud"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.286Z","timestamp":1790314830286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurex.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 14:00:04 GMT","end":"Sun, 13 Dec 2026 14:00:03 GMT"},"fingerprint":{"sha1":"F1:3A:4F:60:34:CB:B1:BB:5F:FF:11:66:79:2A:8D:D6:6E:C2:EA:E1","sha256":"B9:90:B7:BA:E4:F7:1C:AF:2C:4D:EB:94:64:8A:61:FC:2B:17:1A:30:5F:D6:15:FC:FC:53:42:FF:81:41:5F:2B"}}},"request":{"raw":"GET /leg/leg-09.png HTTP/1.1\r\nHost: aurex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 73284\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"leg-09.png\"\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\netag: \"15f6084d2d20a1d9c64599976805b49f\"\r\nlast-modified: Thu, 24 Sep 2026 09:19:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xqg2x-1790314830290-8d2a932c2180\r\ncontent-length: 7324\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7324,"size_decoded":7835,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"15f6084d2d20a1d9c64599976805b49f","sha1":"45478fea5de5aafb8e17828bb9fd62b905cdd363","sha256":"37f4092ce12e5f456f107fd0310d4886d0baca6a97cf8fd1b6822521ada8bcbf","sha512":"0d2388564a825cf52a1585be3440073b0a79ecbcbf9a5e094f9be7718f8d057cedc10c8e1c666ff205e9b0fb1d9f8ba553a04baae690006dd8d2b1a1e926a083","ssdeep":"48:ToyN79sId15V9tlPeOXQIsK35t7W0Iu0Oh+owY95:Zl9TrL4KQIfDWxTowY95","tlshash":"e7e1f7215310c2bb906f40a7135f65b929b923daebf112388112af1c7ac678fae70f54","first_seen":"2026-09-25T05:41:12.091296Z","last_seen":"2026-09-25T05:50:22.628979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aurex.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.162Z","timestamp":1790314830162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:17 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nage: 308353\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":35517,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-09-25T10:16:25.644854Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bodoni+Moda:opsz,wght@6..96,500;6..96,700\u0026family=Hanken+Grotesk:wght@400;500;700;800\u0026family=IBM+Plex+Mono:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:29.967Z","timestamp":1790314829967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Bodoni+Moda:opsz,wght@6..96,500;6..96,700\u0026family=Hanken+Grotesk:wght@400;500;700;800\u0026family=IBM+Plex+Mono:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 05:40:30 GMT\r\ndate: Fri, 25 Sep 2026 05:40:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19875,"size_decoded":2528,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0ef7b81a1633d1ff61b0fd4818690b20","sha1":"b4a70aa1df87543d49a55875550327b1e54fd91e","sha256":"3167ed7f4991aeded788e339130dbfaaeb7b11828e191859a0c129b1e7e05aa3","sha512":"72dc349709a2102a372c3239dbe101f9c12f00e7353b1a233337fac09d80500c993d4f9f7ccde6a83c77ac1c8c8dae6716aec251717812b01d251b89954a9cb5","ssdeep":"192:F2qJcbqGIwVjRAO2q3cbqGIwVFRKaKy6Voc8TRKyp2oc8M/KyXsoc8WuKyWJoc82:nyqYTwqYyyoy1yWyn3Qustusd","tlshash":"6092449004679000db831cd223cebe35ee4fa2517444c53aabfe5a9bed9fc625364b2d","first_seen":"2026-09-25T05:41:12.092154Z","last_seen":"2026-09-25T05:50:22.673094Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":46,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurex.cloud/","date":"2026-09-25T05:40:30.129Z","timestamp":1790314830129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurex.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:17 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nage: 308353\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":35517,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-09-25T10:16:25.644854Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":31,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}