{"report_id":"e11d4007-df6d-4f34-8e7c-7c09b161c70a","version":0,"status":"done","tags":[],"date":"2026-09-25T05:46:55Z","url":{"schema":"http","addr":"faergth.top/","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"172.67.196.25","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"faergth.top/#/login?redirect=%2Findex","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"title":"后台管理系统","dom":{"size":136973,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53641)","md5":"8cf1967b08d8dfe59b9f850157a27f5b","sha1":"82e2945e09e85665cdbe02c29127bce7caca72a1","sha256":"f4dcf4b73ab5d5b74b567bf258c135fe0153da376cd2e9b34dba2e53b1b74391","sha512":"90e1d3fe97bca362c89455b1d78b1552f371ab8a7b3d63aa02fa9321d56b82872577f0032bf7c33b91588075348447da512ea8c2813ec86441aa901adbb9281a","ssdeep":"1536:wU4lmj2O+PeXbd9w7V8OBZSXgDPUCU1SSVXJnQv89Sf6dQGaNm2RZq4W44T4abZI:wU4lmyMsuXgDPUCe/8pK4P","tlshash":"70d32ce8d320e2bc544fcf5ffa71f554291f20b77ae14968b25c5e909bd38c49a06c8a","dom_hash":"domhashe7cf146d4fa04aff382c43a2cb2c1ee5","first_seen":"2026-09-25T05:47:07.714849Z","last_seen":"2026-09-25T06:03:25.711847Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"faergth.top/","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"172.67.196.25","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:46:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"faergth.top","ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-26","domain_rank":0,"first_seen":"2026-09-25T05:47:04.035597Z","last_seen":"2026-09-25T05:47:04.035597Z","alert_count":13,"request_count":13,"received_data":2032420,"sent_data":5810,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faergth.top/","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"136e1763dc52283ea4086cc8cfe9a316","sha1":"218e2c85a5fecfe0cc598c03793c1c931b0baa44","sha256":"d3af55768eb1f3a1c8c16dfb9167f7919e00cc25270301423e555fb791dc45c5","sha512":"438fa6262d507ab745f4f02b68a388eac4ee3dbedc76c453a4addf6b6f965d058a4c08aad1359e213b7e0b0da90dcef2b6046f65bb4c3c927042c45014390253","ssdeep":"192:BEVe50i3LMdRO7Qu50S11H0A5SEBhvdW5joeW90SiRPotzn2RKTOupAq56M:BkKL4q0ST0A4EBhvdeGyR0n2EOA","tlshash":"d362ecf6d394f4399ba7ec17266afb6250ab2a333d302779026cd550a750ad4138f90f","size":15673,"data":"","first_seen":"2026-09-25T05:47:07.735591Z","last_seen":"2026-09-25T06:03:25.722302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-elementUI.3c8d1f82.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d476673d41d7bb3b84389b552ace9cdc","sha1":"d0e8d76a417e8f930cd5af9f380befb7cada1ff5","sha256":"4c41a7963b345e4e4a40470c8b144630a9595dc6170eec9de285e2aefd6a419d","sha512":"b197c624501c5dba5ab7cd4bc73e7d83959e1b6d0f5fbee78d895c464ea4a31a02357c31448c50b3666df506e77f8ecfacfc87e2be43214a82fe977a03da3ae6","ssdeep":"6144:EBNId8lURd2/w7/t+dVOVbmvHdyksFQ9p63Hks75UfbGxgGOC8GsYIMeTfYF0:saOw7VaOVbmvdyksOcU8ONTfYF0","tlshash":"92f41a8d72c5b47147a360b0103f150bb33b2aac6809809cf675d8ea6d79a4d626ff7d","size":753324,"data":"","first_seen":"2026-09-25T05:47:07.733542Z","last_seen":"2026-09-25T06:03:25.712851Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-libs.069c5fd3.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9559f8004e36d86f6226b109ff8db68c","sha1":"b69579d8344a806f5d32de07fc62cd97e15179ec","sha256":"f989d18bf304449b48ca28d1a1782a3dd74212e350a6cc64d0714469b9dadbed","sha512":"8df1327ef6e0992222c64b17c4a71c610611cb4d6202f9b3637aa32d88dad0d55e19df345b196f5231e91402d97c98180856bbff36fa07ebc2b57b34d3013b3f","ssdeep":"6144:lrMTB0RXMaxV5ftJtFavJqpBJ3+3dlTETOQMa3d:lrJcoxtdrBJuWL","tlshash":"7ec4e89cb2d1b0b113e360f5402f160bf23ba869f44a94d4e269e8e16cb994e5177f3d","size":579993,"data":"","first_seen":"2026-09-25T05:47:07.722526Z","last_seen":"2026-09-25T06:03:25.716586Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/app.d2244b16.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec562244c4bd96871cd1d606fae8f2a9","sha1":"ffd8043043984ca83b159402e5d76138e4e7003e","sha256":"387b1134b645d78391e00adf51f7eea4030fa3f6bcace38a509399e0a2dac306","sha512":"6804cd421f920758120ecb781d688235ec272a5c55887f37fccb1e5100a9605451a07b71855bf4ee2dc13faca84f4d00999059c54632a5f26987e0ead7f8df41","ssdeep":"3072:2dXoUuhqRtZRlkwrpI1vAlGffYLgDPUHXBry5Ew6XF/:2dXoUAIkvgUSBrUw","tlshash":"ec444cb9b190f0a80b8f6776613bb516b63b34f639950860a579cdc46bb2cc86303d99","size":277105,"data":"","first_seen":"2026-09-25T05:47:07.723935Z","last_seen":"2026-09-25T06:03:25.717198Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-7802dbca.d6446c8f.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c749d051cf09eb218a17cb7215d1b3c5","sha1":"1be4a75346a6e11d9e86ab63ce924777c59ca951","sha256":"6e4d697e99c622e3d03e7c205a29fae9c45e2cdbc3851d5b0a372dd3e995ea4f","sha512":"32565be8d2444d37ca36918bc75e1a1be59f11465ebd6da64a56139775756de6c74f152982a17e193ce44b49fe610833ba2fefccda3cdba5456116c14a3f43b2","ssdeep":"192:sirT744F4aqEkds/hvPk2oZtP29G2Cy29UF2RJE+:sirTGGku5vPkt2A2T2Q2F","tlshash":"f0d1d825944eeca8ae13d125822f1130a1690df4c219ce88ff31cce95b99a5c332f73e","size":6589,"data":"","first_seen":"2026-09-25T05:47:07.717856Z","last_seen":"2026-09-25T06:03:25.713653Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-2d0b6c88.a1ebff84.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"021ba853aba59a5d369cf46591cf0f77","sha1":"0a4150a155903c19ecbe7366b88b4d6406103133","sha256":"1f0bcad94ae94b85db3ca6187ac682f2cad3e1488d04b97ae834fed4ef6635c0","sha512":"01da3eb24a73472eaa62eaa15caed7ac0e9f27b087cbedf7b5e7aaac6e3c5e8422acd100782fbd5fe3fa0ecbfb8c5ab238d1788d456871fc32bc6ebf9ceff0b9","ssdeep":"1536:xslUqrcE4aaNc4Q4x2fBQ6PpasU2P+/5oseza+yie4yHp:SlUqr5W6PpasU2PQ5oPm+y54yJ","tlshash":"ff33f985b6e6b46403d2a0f0061f084ae23e761da45f54fcfa5ac8e2ac7588d653ff74","size":54831,"data":"","first_seen":"2025-05-12T11:10:13.082523Z","last_seen":"2026-09-25T06:03:25.717795Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"faergth.top/static/css/chunk-7802dbca.2816fe63.css","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:13.750Z","timestamp":1790315173750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/css/chunk-7802dbca.2816fe63.css HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-1fbf\"\r\nexpires: Fri, 25 Sep 2026 17:46:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvoQBIy2w0HwQ%2FOYx9mrVIozulLEalKjvMi%2F0BK1JGHweGd4EAHzN%2BpKtBCGSsQHHL%2Fxt69jozDruGZwdvbaRub90CuMhXwqe6I%2BiNLmBQD%2B95vN5k1HpfvqbahwBw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2bf89c120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8127,"size_decoded":2583,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8125), with no line terminators","md5":"f38a07db7cf151a10a04b519ee4dd63f","sha1":"864820e4f9026843696e9c9f162f8f4ce23094ea","sha256":"6141f530024c9792dee152e5445ad938207e03c67f9722894b02bce063f86ae5","sha512":"8b2238700636089250e8266c16f5f252db809bf4c3d12f03a345ed4b4a5436f54d5a672e7365432896e96bf3ac8316593af39f2993764e9efa5cf9997cc8791c","ssdeep":"96:r3sDCcE95IHEEbAEEbi7PDxP2PRLv1pXbHu:Df95IJ7dOpLv1pXbHu","tlshash":"eef177b2440821069027cd60f7d80a9e927ce733e6130679b6d0b549cfc7ac7a3716b7","first_seen":"2026-09-25T05:47:07.716569Z","last_seen":"2026-09-25T06:03:25.718318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-7802dbca.d6446c8f.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:13.752Z","timestamp":1790315173752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/js/chunk-7802dbca.d6446c8f.js HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-19bd\"\r\nexpires: Fri, 25 Sep 2026 17:46:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8eI4SY08PogttHsFYM2Ouy1OkBX0KpsBPdxXHXnrY%2FtzeOxkILE6BeOopZ31HWYQZgsdYs7Mqb%2B808JHyRTfoGZAzdDGCAujCiztqQbdimrkYce6a6fziAUCE4S5A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2bf89e120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6589,"size_decoded":3449,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6522), with no line terminators","md5":"c749d051cf09eb218a17cb7215d1b3c5","sha1":"1be4a75346a6e11d9e86ab63ce924777c59ca951","sha256":"6e4d697e99c622e3d03e7c205a29fae9c45e2cdbc3851d5b0a372dd3e995ea4f","sha512":"32565be8d2444d37ca36918bc75e1a1be59f11465ebd6da64a56139775756de6c74f152982a17e193ce44b49fe610833ba2fefccda3cdba5456116c14a3f43b2","ssdeep":"192:sirT744F4aqEkds/hvPk2oZtP29G2Cy29UF2RJE+:sirTGGku5vPkt2A2T2Q2F","tlshash":"f0d1d825944eeca8ae13d125822f1130a1690df4c219ce88ff31cce95b99a5c332f73e","first_seen":"2026-09-25T05:47:07.717856Z","last_seen":"2026-09-25T06:03:25.713653Z","times_seen":2,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/api/common/getAllSetting","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:14.382Z","timestamp":1790315174382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://faergth.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=FF1639424AA4A5B0C2F85C9B571E01FC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://faergth.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQFciJvuHDI2%2Ft070UB8CIQwLueYkW6qh1MDW%2FT1xsdjQY2R8H0NgZfnriY9%2F6L3Ergn60ogxyszHYvYCAyzK2vVbhsJhspkYlmHUGUh9nVdG0ij32aZqlvGV8GN%2BA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2fe96a120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":980,"mime_type":"application/json","magic":"JSON text data","md5":"21a4299321578d77d8faef1164eeab2d","sha1":"75c7c4003f8aeff968abc13971e4d890f008207b","sha256":"7a2c7f91c3b5775b8c510b04017f8d1f1e88279babf73c02a5e5f6cdaa763f6f","sha512":"6a91b0968540c0f7953a1464527047468ca2cf33736a41ee9a9d2b10e6317a5d53e4660d862f83e50fb1b392115d2ca58438590e26922559bd2290037f9d41d8","ssdeep":"","tlshash":"d2b0127c2f2c53aa68c211d1c20e1300223031103520f34cc844d13c60cf0972c249c6","first_seen":"2026-03-10T12:08:03.155625Z","last_seen":"2026-09-25T06:03:25.719733Z","times_seen":13,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/api/captchaImage?timestap=1790315174355","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:14.383Z","timestamp":1790315174383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /api/captchaImage?timestap=1790315174355 HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nisToken: false\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=FF1639424AA4A5B0C2F85C9B571E01FC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBe7ewzTQmxQi2LDlEOp6M08Fq4jZQjokKiEz1pkdJU89Slp9L4UAqM3%2FOc6ql0PAPA%2FCQ1PGnYNDRDgDWzyi%2FxsytvbxXiOHi71amXSgP2xVDM9E2n1avvzqPnjkQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2fe96c120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4166,"size_decoded":3860,"mime_type":"application/json","magic":"JSON text data","md5":"095807c0ce49d8de2a8937ab55055691","sha1":"63a1a620b2ef9ffc94b37480393ca8848ef28ba0","sha256":"5139adddd0a9939afbc128518250d560bd99089f1c92a9aa5ca9b6b80cbedcab","sha512":"4be0b4e9ee8d4bc616a9bb0059ba5593cda2947ddb4f618256d7579a9bc8e76f6932b6d842b8bfde2245ad7e5411011fb39fe6a74178b03f87618eacd719a8a7","ssdeep":"96:ud3DwAnwYV7W72yJHxO6+om2YtVog1tblzaVQhx/:uJDNnw07WNJHA69m1HoKlzaVe/","tlshash":"f1812a3c7e79e14adda9f80506a332c97c5cca7be2b6c7c224a941d731f202681ad757","first_seen":"2026-09-25T05:47:07.721118Z","last_seen":"2026-09-25T05:47:07.721118Z","times_seen":1,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-libs.069c5fd3.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:12.604Z","timestamp":1790315172604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/js/chunk-libs.069c5fd3.js HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-8d999\"\r\nexpires: Fri, 25 Sep 2026 17:46:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYITMkijTwOoqQOT%2BltymJ4B1OB2%2Bgw4mt0udblJIikgoqH4PXtC3%2Fz07oX%2B2KJjuY81hWlJ5ET3gl%2BfjRzkPs1d5utjTBWsiQttV0GitPcGcqhklcI8xcOyuc0vKQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba24cf38120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":579993,"size_decoded":179175,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9559f8004e36d86f6226b109ff8db68c","sha1":"b69579d8344a806f5d32de07fc62cd97e15179ec","sha256":"f989d18bf304449b48ca28d1a1782a3dd74212e350a6cc64d0714469b9dadbed","sha512":"8df1327ef6e0992222c64b17c4a71c610611cb4d6202f9b3637aa32d88dad0d55e19df345b196f5231e91402d97c98180856bbff36fa07ebc2b57b34d3013b3f","ssdeep":"6144:lrMTB0RXMaxV5ftJtFavJqpBJ3+3dlTETOQMa3d:lrJcoxtdrBJuWL","tlshash":"7ec4e89cb2d1b0b113e360f5402f160bf23ba869f44a94d4e269e8e16cb994e5177f3d","first_seen":"2026-09-25T05:47:07.722526Z","last_seen":"2026-09-25T06:03:25.716586Z","times_seen":2,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/app.d2244b16.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:12.605Z","timestamp":1790315172605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/js/app.d2244b16.js HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-43a71\"\r\nexpires: Fri, 25 Sep 2026 17:46:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsDtUCijNzCCSh6Jf%2F7ByIWbtHHXugBrm6E%2FQ5BWWmEB3v1FeQRwpzVqM2NlIlMIx8mVYXfH9Ju1jxck1xXQcT3045N0AfVBfpap6%2FgIMdOqFFyDztfPlnM3hoSxcw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba24cf39120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277105,"size_decoded":87001,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65486), with no line terminators","md5":"ec562244c4bd96871cd1d606fae8f2a9","sha1":"ffd8043043984ca83b159402e5d76138e4e7003e","sha256":"387b1134b645d78391e00adf51f7eea4030fa3f6bcace38a509399e0a2dac306","sha512":"6804cd421f920758120ecb781d688235ec272a5c55887f37fccb1e5100a9605451a07b71855bf4ee2dc13faca84f4d00999059c54632a5f26987e0ead7f8df41","ssdeep":"3072:2dXoUuhqRtZRlkwrpI1vAlGffYLgDPUHXBry5Ew6XF/:2dXoUAIkvgUSBrUw","tlshash":"ec444cb9b190f0a80b8f6776613bb516b63b34f639950860a579cdc46bb2cc86303d99","first_seen":"2026-09-25T05:47:07.723935Z","last_seen":"2026-09-25T06:03:25.717198Z","times_seen":2,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-2d0b6c88.a1ebff84.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:13.748Z","timestamp":1790315173748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/js/chunk-2d0b6c88.a1ebff84.js HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-d62f\"\r\nexpires: Fri, 25 Sep 2026 17:46:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zyb%2BwyrDDopH%2BqqHGiafLvfgF1wg8%2BOn%2B3%2FGpRksMckPDslrbLcouCbZbFLPOTioAgGvQlT6zwB9x87RGU5d4Qa7w4eEstRy4rojQMauGFvfVcPH0ZwGJl2m2Nzdg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2bf89b120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54831,"size_decoded":17384,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54827), with no line terminators","md5":"021ba853aba59a5d369cf46591cf0f77","sha1":"0a4150a155903c19ecbe7366b88b4d6406103133","sha256":"1f0bcad94ae94b85db3ca6187ac682f2cad3e1488d04b97ae834fed4ef6635c0","sha512":"01da3eb24a73472eaa62eaa15caed7ac0e9f27b087cbedf7b5e7aaac6e3c5e8422acd100782fbd5fe3fa0ecbfb8c5ab238d1788d456871fc32bc6ebf9ceff0b9","ssdeep":"1536:xslUqrcE4aaNc4Q4x2fBQ6PpasU2P+/5oseza+yie4yHp:SlUqr5W6PpasU2PQ5oPm+y54yJ","tlshash":"ff33f985b6e6b46403d2a0f0061f084ae23e761da45f54fcfa5ac8e2ac7588d653ff74","first_seen":"2025-05-12T11:10:13.082523Z","last_seen":"2026-09-25T06:03:25.717795Z","times_seen":10,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/api/setting/get/PLATFORM_SETTING","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:13.785Z","timestamp":1790315173785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /api/setting/get/PLATFORM_SETTING HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: JSESSIONID=FF1639424AA4A5B0C2F85C9B571E01FC; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ck%2FDYAViBZuCB%2Fnxl4G%2B2QYlgJ%2BTYyh4bzZB2ptYqo9Ts%2Fevi4dNcwieuLomampH9yvAIPR%2BY0afYZcij%2FDR2v8pYLRbChGmBVWuZjMR48u4HJlu%2BxwxJ4QtFeta0Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2c28a6120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"FF1639424AA4A5B0C2F85C9B571E01FC","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=FF1639424AA4A5B0C2F85C9B571E01FC; Path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":979,"mime_type":"application/json","magic":"JSON text data","md5":"d572c9c9fac05a59abcad03694ec9154","sha1":"39ccc4409808f8adb35906afe18700c2f47839c2","sha256":"463df0876c48bfb2dc7709046848a34f0dd61ef52e31f255f7110db5ce6b1e98","sha512":"67c17afc51d4fd14bdc27499a2d6171abd655836c73d5fe01707c4dd1adc02e7824c4b9cec13be498b93653a48e0ca99f10b4edfebf43cb229c5b4794590d6fd","ssdeep":"","tlshash":"2cb012173d344226ecd781a0b502b3440560307115905108ccec2014d0d956920804d9","first_seen":"2026-09-25T05:47:07.727788Z","last_seen":"2026-09-25T06:03:25.719052Z","times_seen":2,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/platform/vexquis/favicon.ico?1782413688838","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:14.190Z","timestamp":1790315174190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /platform/vexquis/favicon.ico?1782413688838 HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:14 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8tRxb3hw6MQNss1kheMUYe1IbjliFPl362HIbbO7K8B1VbVK42KFQQCWpw8YfYBMOG27Q3GKrUkWOOAeVG0hHxQWr1pNuk1U4sMlNolJIl4k8pLohMclb1gWC%2FIqw%3D%3D\"}]}\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6a3de9f8-10be\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba2eb93f120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1724,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-09-25T06:06:13.821244Z","times_seen":149,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:46:11.853Z","timestamp":1790315171853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8%2FtfqBE3AxcdCrsyHbpbTdMxaLjH6nYJ%2Bhr1hopivl6squI8TNBDYsL5D1Cf6i3QexgnsESyvXMd3aRiBzqt4Td0bGYUoIXKlf2BFtyB0GBezd4Mn7psNiyXff1iA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407ba209e85120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21775,"size_decoded":7126,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16213)","md5":"a57d9dcf5feb151c672f741e6c60f447","sha1":"2a1c05c291653abb61587abd34778a42932d768e","sha256":"758cf4a76ca5c206147d74551d78ae3a3b7ec758c4c793912c7ee868d480297a","sha512":"894a8477531b4bfaf8c35cb15289109eb89145b431dcbc35491202f76776c50fde1d59eef5cac7e1cda6544355ae6151c9505deeab3c7fcd8072bdb953297950","ssdeep":"384:j/5kmiFSF3FgFxFDwkKL4q0ST0A4EBhvdeGyR0n2EOB:j/niFSF3FgFxtvST0A4EBhfn2EW","tlshash":"0fa272f6d751f0359713ed1b239af71200ab29333931a67932aca1599f40ac8138b95f","first_seen":"2026-09-25T05:47:07.729772Z","last_seen":"2026-09-25T06:03:25.721145Z","times_seen":2,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":54,"connect":20,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/css/chunk-libs.ea078ece.css","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:12.599Z","timestamp":1790315172599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/css/chunk-libs.ea078ece.css HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-96e4\"\r\nexpires: Fri, 25 Sep 2026 17:46:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiDGKnjt49YMxc99UxKZKQU8sihck7nyB0GimtBXpzJEvablyjinPybuN%2Flw4vWDy7LE6UXNOYc%2B2jYI6g48OlZoWz%2FRkg%2F4X50moTW64vb3Hcdu1GYBWdJrKMlM1w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba24cf35120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38628,"size_decoded":6092,"mime_type":"text/css","magic":"ASCII text, with very long lines (22707)","md5":"09087ac11e8cf31dbccf1a43b34f7541","sha1":"d998de0a4682f7dc96fce2b0516af6e5dd0746ba","sha256":"58791d5ea3de6ecec9490d54cc6dfde017d8bd3ee7d0af94a6dc816bc6e8901a","sha512":"5ff706735d199007d5a04de1e5c62e707158208ee4dc5a035c61d6c4f1d80a6378485cf319fa4ce49ef049b6f42162619632dcf0d2b2325a62ef57c23a10692b","ssdeep":"384:KEhh6wW89xrDB5OBz0QyxFbmSOxd6GObiu6nOGvYvLDuyF9xNSU0ieUbWDx9NZ5R:ABzHyxFbmSOxd6GObiu7X9WDjNZ5Go","tlshash":"8903ee4ee8572cff0236652d91c052e02f9bfb7bf0e351daf491e58626dd0580369a3a","first_seen":"2023-04-14T21:48:03Z","last_seen":"2026-09-25T06:03:25.721741Z","times_seen":265,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/css/app.173b3dc4.css","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:12.601Z","timestamp":1790315172601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/css/app.173b3dc4.css HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-42b01\"\r\nexpires: Fri, 25 Sep 2026 17:46:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qy0p43CpH6hTtLW14pzBno05mz1HAQSvLH6SWisb2XOEsvkq0uLknNYO5QY2wuE3YxQzKLG71SUuO5J7sa1G5p9QYyVC8es%2BQkbOkkYDzeAYgzWS1G2eDiI%2F1D6y1w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba24cf36120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273153,"size_decoded":43797,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64974), with no line terminators","md5":"e5aa63beae8667d54e3ca1e86f65d86d","sha1":"c7c729bd3618096f5ab3dc5eac274e5fcd9a3fe8","sha256":"1182676c64f12f0095a254148e4e69971d625cf68e29a0c7387291419cdb4208","sha512":"1d283ba82285b65fa688845fc084a71607382d485871c61ae28d97111e29e55059d527630eb186bd7977e8c4feb2aa7e6744b1da6ff793abdea73605c23c3d8a","ssdeep":"1536:ravyngEUt6f49+89+hoz4bv5yqm2gW9cMEutb7OOHiZkW1Yu8e+3SNZ5fhIcau9H:BRKwtmnfUubtLSMifAB","tlshash":"d64496219b572127612bda6d76c0ba895f28c323e4325fbbfe51780dc7d35891263a0f","first_seen":"2026-09-25T05:47:07.732377Z","last_seen":"2026-09-25T06:03:25.715689Z","times_seen":2,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faergth.top/static/js/chunk-elementUI.3c8d1f82.js","fqdn":"faergth.top","domain":"faergth.top","tld":"top"},"ip":{"addr":"104.21.76.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faergth.top/","date":"2026-09-25T05:46:12.602Z","timestamp":1790315172602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faergth.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:16:18 GMT","end":"Fri, 20 Nov 2026 14:16:17 GMT"},"fingerprint":{"sha1":"B4:CE:E5:06:E2:6A:D5:A4:23:9D:47:F2:71:A7:F4:EC:0B:A9:70:0A","sha256":"10:12:7F:58:FC:3C:CB:9F:D6:04:A5:C3:AC:8E:04:46:4F:0E:CF:1C:B8:DE:6F:C9:D5:7E:08:DB:3C:3C:59:36"}}},"request":{"raw":"GET /static/js/chunk-elementUI.3c8d1f82.js HTTP/1.1\r\nHost: faergth.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 02:54:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3de9f8-b7eac\"\r\nexpires: Fri, 25 Sep 2026 17:46:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9KX%2F%2BKXIcXnLwi70%2BhrecXY%2B7Ix5ynkVyHKh5aB3fVa8K6l%2BYwXuIOMZC%2BGk%2FJO6SfmWPUEDIumpBnbiSPZEUt%2B4QR9O4SIkdcc7FPsi41T6L5y5zO0ZZna79XbhQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ba24cf37120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":753324,"size_decoded":194132,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators","md5":"d476673d41d7bb3b84389b552ace9cdc","sha1":"d0e8d76a417e8f930cd5af9f380befb7cada1ff5","sha256":"4c41a7963b345e4e4a40470c8b144630a9595dc6170eec9de285e2aefd6a419d","sha512":"b197c624501c5dba5ab7cd4bc73e7d83959e1b6d0f5fbee78d895c464ea4a31a02357c31448c50b3666df506e77f8ecfacfc87e2be43214a82fe977a03da3ae6","ssdeep":"6144:EBNId8lURd2/w7/t+dVOVbmvHdyksFQ9p63Hks75UfbGxgGOC8GsYIMeTfYF0:saOw7VaOVbmvdyksOcU8ONTfYF0","tlshash":"92f41a8d72c5b47147a360b0103f150bb33b2aac6809809cf675d8ea6d79a4d626ff7d","first_seen":"2026-09-25T05:47:07.733542Z","last_seen":"2026-09-25T06:03:25.712851Z","times_seen":2,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"faergth.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}