{"report_id":"e2b75581-b7b5-41e8-b331-d1adda4642c0","version":0,"status":"done","tags":[],"date":"2026-09-04T14:39:38Z","url":{"schema":"http","addr":"umrechnung.chinashcapital.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips","fqdn":"umrechnung.chinashcapital.com","domain":"chinashcapital.com","tld":"com"},"ip":{"addr":"104.21.66.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"umrechnung.chinashcapital.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips","fqdn":"umrechnung.chinashcapital.com","domain":"chinashcapital.com","tld":"com"},"title":"Hotel Lundia","dom":{"size":415049,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17862)","md5":"542acafbc52f61cf94f2b58b1535404f","sha1":"cd2bc225c1a62c6d185b6bf7eab666795acbe799","sha256":"19ac943a631c7c04e45c2e80c67d0dbdba070f91e9c7e08f7f2bef7d7615bb0d","sha512":"5a4855426dc7aa76ba0603d626f6f5b4a2d9dfb887566fdf0af7ee99f896c769c9d7834c32db356c44f0b741d8171cea57ce07e2497e32df65c8da1b6aa6faab","ssdeep":"6144:X2VRpkoGBu+AVuE1pPkW3n13n1Vn1Ln11n1fn1Nn1En1NO15n1waDA1omN9mNnmc:GuonhPt6autvlUQ8qQSbSeXE5","tlshash":"0c947d6db6d0156710eab26ab8d57dab3174833483d1c1d6973ccc1e21ceceeab1a352","dom_hash":"domhashe25a06fa24920a7b42d95abf1efd1390","first_seen":"2026-09-04T14:39:39.829204Z","last_seen":"2026-09-04T14:39:39.829204Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"umrechnung.chinashcapital.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips","fqdn":"umrechnung.chinashcapital.com","domain":"chinashcapital.com","tld":"com"},"ip":{"addr":"104.21.66.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:39:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"umrechnung.chinashcapital.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"umrechnung.chinashcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"umrechnung.chinashcapital.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-15","domain_rank":0,"first_seen":"2026-09-04T00:25:37.047633Z","last_seen":"2026-09-04T00:25:37.047633Z","alert_count":2,"request_count":1,"received_data":414267,"sent_data":703,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cf.bstatic.com","ip":{"addr":"143.204.238.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":109157,"first_seen":"2020-10-08T14:09:51Z","last_seen":"2026-09-01T11:42:54.892805Z","alert_count":0,"request_count":1,"received_data":122318,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-09-04T10:28:23.543571Z","alert_count":0,"request_count":1,"received_data":1391,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"umrechnung.chinashcapital.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips","fqdn":"umrechnung.chinashcapital.com","domain":"chinashcapital.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:39:04.534Z","timestamp":1788532744534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chinashcapital.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 13:17:53 GMT","end":"Tue, 01 Dec 2026 14:16:35 GMT"},"fingerprint":{"sha1":"19:13:3D:54:A6:04:62:FD:BA:D7:5B:B8:A7:5B:23:BB:B8:1F:B8:69","sha256":"BD:B0:4E:1E:00:51:05:F9:7A:0F:09:4A:3F:1A:18:54:7B:C1:39:81:58:9C:51:95:CB:34:78:03:5A:B2:96:82"}}},"request":{"raw":"GET /myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips HTTP/1.1\r\nHost: umrechnung.chinashcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 14:39:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-store,no-cache,must-revalidate\r\ncontent-security-policy: object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9P1gTuUHdC8ppY7H42z25eQ98KiHOCkyChtqAxuUSc9TPpGgv%2FQ%2FVDhARGWh388Gqt0lB0YkG3pIN1XQVU%2BL2aOtWlrigLUwx2D3MBQ7Xq7SIIG9gXsU3p00jQdKdrarVeca7BufNj6CqWGhaW1qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35dbdd64b56b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413169,"size_decoded":137372,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19601)","md5":"bb123718c56d03b36f30c8776a789477","sha1":"f24730fc71c2b40f7f803e4fe3872187870303f1","sha256":"a5c733da09a813f720536fe839c4a9adfa77bf5f6807b2fb59a70cf212280796","sha512":"13f7a2a37ff7bbe80c5fea1d94b8214b5116ebe8d10ea78ceb5e9084dc42cc9a269714ad7cc556d7323434f2f7e02ded6b40db4316085c61653304f5c677c3df","ssdeep":"6144:I2hRBolBT+AVsE1pPkW3n13n1Vn1Ln11n1fn1Nn1En1NO15n1waDA1omN9mNnmNA:/Jo7vPt6autvlUQ8qQSbSeXEn","tlshash":"23947d6db6d0156710eab26ab8d57dab3174833043d1c1d6a73ccc1e21cedeeab1a352","first_seen":"2026-09-04T14:39:39.830451Z","last_seen":"2026-09-04T14:39:39.830451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":127,"connect":21,"send":0,"wait":279,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"umrechnung.chinashcapital.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"umrechnung.chinashcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/hotel/max1024x768/510907192.jpg?k=64d07287713bb864b11a121658b6260da69649f3a1df5dff0c156109cb267234\u0026o=\u0026hp=1","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://umrechnung.chinashcapital.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips","date":"2026-09-04T14:39:05.601Z","timestamp":1788532745601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/hotel/max1024x768/510907192.jpg?k=64d07287713bb864b11a121658b6260da69649f3a1df5dff0c156109cb267234\u0026o=\u0026hp=1 HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 121750\r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 09:54:59 GMT\r\netag: \"be64ffa1c147408e2ca73c575a8308ff3b0bde0a\"\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6b6b5afeddd21a24bae939db109a4aa0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 5DhJRSLEsV_Ezw_vxAHJ70ImcPlXf9aCyLDcanr4cdqjbvsxwxVY4g==\r\nage: 1658646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121750,"size_decoded":122318,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1023x768, components 3","md5":"4c6c9c8b050e90da9a7afa279058c61b","sha1":"494b1106e727cbacc0774f60f883d9b358bf2d54","sha256":"e3ff297aa89542082ca1ccf24d4dc8c987bced2dca7db048c12eaee0456b205f","sha512":"114722d8e3a3147e2f3816947c896104caf06576ca21ed40ea18bdc07bd26eaddf041b68c550978706c359887b94eba988dc28784f04e2aca284bfd52986b9de","ssdeep":"3072:so/0Cq/cT0rbkmhkg4K+fVKYUSFZ4mA6wi2sULXGYsH2E:sWZkkmhDqfVCSvD6sUDGxWE","tlshash":"aac3125312df17cc8d6173a9aab300cfbea1bc6003e6b4e571406acb27d1c52da6f255","first_seen":"2026-09-04T09:07:52.1606Z","last_seen":"2026-09-04T14:39:39.831548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":12,"receive":17,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/gb.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://umrechnung.chinashcapital.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4Aa395a493f35eb011\u0026sid=80f7998fd36cdcbe20faaad2ee8d44dd\u0026aid=304142\u0026auth_key=CjUyMTc1MjgyODAq-zn\u0026source=mytrips","date":"2026-09-04T14:39:05.612Z","timestamp":1788532745612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /gb.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:39:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6864014e-229\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i\r\nage: 1477919\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kt6vLotSVaIv837DxR99KvIUnD4wz1brxx3T3LAC9ZBI%2FRFkFW2LLXeDDxc8qBRHclPizLhnVqFQhKYgqtNBH7kQNYeM%2FVbYz4HGvyCpX10wQqAr%2FmnyWYd2fXltdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dbddc3bbbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":1106,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0487cd502c5e2dbdee5be26ffa835c9","sha1":"e6c2ff948790e5d9aafd3530e49171628248cf0f","sha256":"42f04826dd7a76e4ecdc9a55fb4a774a26e03a425ca1363628bb1c6f6ea1a87e","sha512":"6df8ddf15b8886dcf672dc1dc7eb7dc54385738425651a76d588c2c7e1253e8af588ded8ad1e1c7fc8e728ca9f46e55d18be4e8e422600ef20e08aa9f7421ae1","ssdeep":"","tlshash":"49f02b1d22286926e22b4354dfbc74b4013f24de2388100cb8443378c51973f79b7aec","first_seen":"2023-07-18T00:24:02Z","last_seen":"2026-09-04T14:39:39.832699Z","times_seen":1187,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":1,"dns":3,"connect":14,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}