{"report_id":"e76610c7-5866-4b72-a029-7b878f418ad5","version":0,"status":"done","tags":[],"date":"2026-09-14T14:59:40Z","url":{"schema":"https","addr":"valoterno.top/","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":0,"asn":219200,"as":"Cryphora Limited","country":"Belize","country_code":"BZ"},"final":{"url":{"schema":"https","addr":"valoterno.top/","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"title":"VALORANT | Exclusive Drop","dom":{"size":17843,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"21e90df33667bedbf1e3325848da9df2","sha1":"67d2bb2ae73d2a54b761584e46426691edb685a2","sha256":"02ac0b0868a8fe4ef5918e05b2679e1be82e9b2bfe34eb896feaacf0a87aedd4","sha512":"d4bd56bd44f685aad75a33e43d8da834a298035f827bc9012750f4d2c11ea2d8af42d750d80d7cb327724cef806843d7be81a7cc96496ccd9b4b5f2b1278bf7b","ssdeep":"384:0I2KTJivwf3+psA+pTT3Td1kscBZMn+MglnM:FIIXd3T3eBK","tlshash":"b082b73792e31072694bb0956be39b4973b8d103d507dc6c7aac0185cf8ede845e7e98","dom_hash":"domhashcd27d21ad35b34440ea475f2e9017d6b","first_seen":"2026-09-14T14:59:44.400872Z","last_seen":"2026-09-14T15:00:20.110455Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"valoterno.top/","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":0,"asn":219200,"as":"Cryphora Limited","country":"Belize","country_code":"BZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T14:59:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"valoterno.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"valorantinfo.com","ip":{"addr":"109.95.159.1","port":443,"asn":48896,"as":"dhosting.pl Sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2022-01-30","domain_rank":695315,"first_seen":"2020-03-01T01:12:59Z","last_seen":"2026-06-01T16:10:48.430371Z","alert_count":0,"request_count":2,"received_data":30698,"sent_data":1109,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-09-11T21:15:25.646406Z","alert_count":0,"request_count":2,"received_data":283470,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":3,"received_data":93915,"sent_data":1740,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":9730,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-09-09T21:10:46.129542Z","alert_count":0,"request_count":1,"received_data":13606,"sent_data":563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.wikia.nocookie.net","ip":{"addr":"162.159.142.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-10-19","domain_rank":62708,"first_seen":"2014-02-27T12:31:06Z","last_seen":"2026-09-12T00:44:58.475835Z","alert_count":0,"request_count":1,"received_data":111143,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"valoterno.top","ip":{"addr":"138.226.236.192","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"domain_registered":"2026-09-07","domain_rank":0,"first_seen":"2026-09-14T14:59:40.478718Z","last_seen":"2026-09-14T14:59:40.478718Z","alert_count":9,"request_count":3,"received_data":21071,"sent_data":1359,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"valoterno.top/","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0908f50044b4ee52828217920e7435f","sha1":"dc2cdc5c7655e25b16a412d5d9eca1ee0cad350b","sha256":"af5af2b785767345c9611f1c9bb716f524c49014f11c9ead7ff667019b0369bd","sha512":"8203a37104c0c2c6b35735ed24c80c7bc69da4332b05ce386dc7d5129d5516b02d5c3c1434a14d0e3545dc5eb1f6c8c34533bbc0e7ac6195aa8ef1e1cc0f05e7","ssdeep":"96:v8vRuvwmy+KEiSGh1CcBag1KnjTC4zYptiHIIPIaIsIyr:K+17Gh1CcBag1KnnC4zYptiHIIPIaIsF","tlshash":"8691433b32f31877995f75970a8756047174e2072982ec18ba3c40968fadd153aeeef8","size":4327,"data":"","first_seen":"2026-09-14T14:59:44.416837Z","last_seen":"2026-09-14T15:00:20.128207Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valoterno.top/apiNew.js","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5100100b58409aa8cd53f4eb8d6a1c","sha1":"ec5b3c83d7db32d4049d4fa91789c7e1621ec5ff","sha256":"ac7aa3828f1d294a09835a44ea1cefb5cb90666f5d863e9e7ea964efbab200d3","sha512":"1c705d496961de0edb3da7c6525fe4c4041b8409568b23e80a75bf2a666c2d78be39690f795a2ab6ad807d1700615b7a8e36bba6bf596d2c06beef714dd1c89f","ssdeep":"","tlshash":"aa41309a99f231a92653209a6613d20462375407754be4a0f98e26082f9df3f7376aec","size":2043,"data":"","first_seen":"2026-02-12T19:57:05.704877Z","last_seen":"2026-09-14T15:00:20.126118Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"valoterno.top/","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T14:59:10.232Z","timestamp":1789397950232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valoterno.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 15:39:25 GMT","end":"Sun, 06 Dec 2026 15:39:24 GMT"},"fingerprint":{"sha1":"64:10:0C:F9:C8:11:09:0C:18:23:86:AC:F4:5A:AB:30:0C:71:C8:44","sha256":"60:62:12:02:6B:86:3C:B2:B1:AD:B1:B9:A2:52:41:9F:77:13:FB:FD:E2:DD:35:04:56:08:CD:4D:0B:2B:F4:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: valoterno.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Mon, 14 Sep 2026 14:59:10 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: no-referrer\r\nETag: W/\"4658-RfYyzU3Ofo8dkjrHj7UmqFGdCdQ\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18008,"size_decoded":5151,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"44cfeb6f4ad3efdfa71649b57f244ba2","sha1":"45f632cd4dce7e8f1d923ac78fb526a8519d09d4","sha256":"c21ad00a90acc33e0883e6ff24786f2f7fbc017342aef920175e1854ac351184","sha512":"629610d574e4bfde620ad7ad07c3a971c1beed74cbff381d86ae568ddf4eef072949d3a46328ade6852e54381ad0d8e4e75b525dbb42eaded66cc2f9f6dad3bf","ssdeep":"384:3IVhTGmuJp9zJw6aEpS1qhXsJVFNXLcBi3n3Wvny0D:4569ZKqhXsJ9oBv","tlshash":"f782b733928200725937b2a5dfa39b4dfbb8d103d503486c7aec11868fbeda44597f98","first_seen":"2026-09-14T14:59:44.402296Z","last_seen":"2026-09-14T15:00:20.12533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":71,"connect":21,"send":0,"wait":172,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"valoterno.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valoterno.top/apiNew.js","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:10.960Z","timestamp":1789397950960,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valoterno.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 15:39:25 GMT","end":"Sun, 06 Dec 2026 15:39:24 GMT"},"fingerprint":{"sha1":"64:10:0C:F9:C8:11:09:0C:18:23:86:AC:F4:5A:AB:30:0C:71:C8:44","sha256":"60:62:12:02:6B:86:3C:B2:B1:AD:B1:B9:A2:52:41:9F:77:13:FB:FD:E2:DD:35:04:56:08:CD:4D:0B:2B:F4:C6"}}},"request":{"raw":"GET /apiNew.js HTTP/1.1\r\nHost: valoterno.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Mon, 14 Sep 2026 14:59:11 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nLast-Modified: Sun, 01 Feb 2026 20:16:15 GMT\r\nETag: W/\"7fb-19c1ad94e98\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2043,"size_decoded":1321,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"da5100100b58409aa8cd53f4eb8d6a1c","sha1":"ec5b3c83d7db32d4049d4fa91789c7e1621ec5ff","sha256":"ac7aa3828f1d294a09835a44ea1cefb5cb90666f5d863e9e7ea964efbab200d3","sha512":"1c705d496961de0edb3da7c6525fe4c4041b8409568b23e80a75bf2a666c2d78be39690f795a2ab6ad807d1700615b7a8e36bba6bf596d2c06beef714dd1c89f","ssdeep":"","tlshash":"aa41309a99f231a92653209a6613d20462375407754be4a0f98e26082f9df3f7376aec","first_seen":"2026-02-12T19:57:05.704877Z","last_seen":"2026-09-14T15:00:20.126118Z","times_seen":45,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"valoterno.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorantinfo.com/images/us/arcane-sheriff_valorant_full_skin_154734.webp","fqdn":"valorantinfo.com","domain":"valorantinfo.com","tld":"com"},"ip":{"addr":"109.95.159.1","port":443,"asn":48896,"as":"dhosting.pl Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:10.972Z","timestamp":1789397950972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorantinfo.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 03:37:17 GMT","end":"Fri, 06 Nov 2026 03:37:16 GMT"},"fingerprint":{"sha1":"60:5B:AF:27:2A:BD:4B:E3:7E:78:4D:39:B4:1B:C9:E5:00:9A:EE:4F","sha256":"7B:0B:51:27:0A:FE:87:BB:27:69:D1:14:57:48:92:B7:00:17:A8:84:8A:72:8B:20:41:37:66:2D:31:BF:BF:17"}}},"request":{"raw":"GET /images/us/arcane-sheriff_valorant_full_skin_154734.webp HTTP/1.1\r\nHost: valorantinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 14 Oct 2026 14:59:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 21 Oct 2025 22:48:06 GMT\r\netag: \"2cce-68f80da6-8dd77aec793138f1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 11470\r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11470,"size_decoded":11839,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93a1e1808e0db9a80eb3addea9b3b777","sha1":"9c61cf6e5c279779de73a30723ddf73f038c4fa7","sha256":"b8d67fb30abdb1dfcf37100191f1096cad3bb026b56215629ca797f2b010ad03","sha512":"1f421a1991eca46f2502bd80a89513083b4bd1c280731cf252a7dc5a50ddbf4d1cdca223863b3199fe956fff43c95e11d2f35e2f0df9c29975dc18852893fa08","ssdeep":"192:EnAC/dnzAvNtKMjaVKfL/TB/KlHuKP16zzu3POqTaYiu+R6ETTZzxrxmaJs1KJz1:gAadnUN1aVubhKOKPD3POqTaydEB5xXF","tlshash":"7b32c012f1b10064cfed147f36c76ab21666980c9a95fb34d66c825c1597f4634a1af2","first_seen":"2023-11-30T21:37:00Z","last_seen":"2026-09-14T15:00:20.121364Z","times_seen":19,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":74,"dns":46,"connect":27,"send":0,"wait":27,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/SBCjUj9.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:11.340Z","timestamp":1789397951340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /SBCjUj9.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sun, 09 Apr 2023 13:01:31 GMT\r\netag: \"55705393b12bed3fbc219a3bd7f7f4f1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Q_RunWLepe1vzun8kh-1jFgYKcrrqcWCnYSShDGr0ERVJqPatPHpJg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1201062\r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\nx-served-by: cache-iad-khef600078-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 30, 0\r\nx-timer: S1789397951.344732,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 11507\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11507,"size_decoded":12264,"mime_type":"image/png","magic":"PNG image data, 602 x 602, 8-bit/color RGBA, non-interlaced","md5":"55705393b12bed3fbc219a3bd7f7f4f1","sha1":"ee51608157192e46d4287327476553266db1a9e2","sha256":"838a050023777fd85a8c42bfd0c078f2dace9bc6d09da1fddfb818f0c7d791f0","sha512":"633b047b01c1e36e1d76ce47179ea18bf8130b703d33a657155b89cc4770b8dcbc2564cdd519bf16ca7e1faf608a07f25a7304001464456f82e4f183b48b145a","ssdeep":"192:TROdpxr2Hg3oBS5LBrIJ1KZILswhgqrPP7MarDpvJJHMLw+VBXFM:FORU2oBy0KHo/P7XxgPBVM","tlshash":"fb32af9d07781084e0c2aeb1d6aa5baa81a9c62a7e7cc34da8557a13330d5413d58a7c","first_seen":"2026-04-05T16:28:33.415417Z","last_seen":"2026-09-14T15:00:20.123796Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:11.112Z","timestamp":1789397951112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoterno.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 12:37:24 GMT\r\nexpires: Fri, 10 Sep 2027 12:37:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:39 GMT\r\ncontent-type: font/woff2\r\nage: 354107\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21472,"size_decoded":22285,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21472, version 1.0","md5":"5f49329007f1e2c86462fd68a5f3affe","sha1":"aabe123b52750eaf9e6fe604204c2687222b0c54","sha256":"571f3457dab507b6f2ce5394d593ca015251b69fea81ab7a546bd2368e9fc3ed","sha512":"59b693cf63d3bc706adc09d289f51f3be1ed2cec80a6e1ebfaf35a5b569ed006e5785cf1faa884e133ab83eb7a0fce9c4545c512c9e7fed63e94264fb13c4937","ssdeep":"384:89cq4KprqBvQGNLahU+kaK7dWYQmQp48QMg9syZ/0TxUAWKymEIetG0pLlZxeH:8iq4cmvfNLahDK7QVmQqhw1EjLLMH","tlshash":"4da2f1a25a83d949fb68403e3b80287d963a03c733967a63575225ebbae1c53305a4c9","first_seen":"2025-09-11T17:19:09.761048Z","last_seen":"2026-09-14T23:50:28.719186Z","times_seen":14170,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":14,"connect":25,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:11.113Z","timestamp":1789397951113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoterno.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 12:37:24 GMT\r\nexpires: Fri, 10 Sep 2027 12:37:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:39 GMT\r\ncontent-type: font/woff2\r\nage: 354107\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21472,"size_decoded":22285,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21472, version 1.0","md5":"5f49329007f1e2c86462fd68a5f3affe","sha1":"aabe123b52750eaf9e6fe604204c2687222b0c54","sha256":"571f3457dab507b6f2ce5394d593ca015251b69fea81ab7a546bd2368e9fc3ed","sha512":"59b693cf63d3bc706adc09d289f51f3be1ed2cec80a6e1ebfaf35a5b569ed006e5785cf1faa884e133ab83eb7a0fce9c4545c512c9e7fed63e94264fb13c4937","ssdeep":"384:89cq4KprqBvQGNLahU+kaK7dWYQmQp48QMg9syZ/0TxUAWKymEIetG0pLlZxeH:8iq4cmvfNLahDK7QVmQqhw1EjLLMH","tlshash":"4da2f1a25a83d949fb68403e3b80287d963a03c733967a63575225ebbae1c53305a4c9","first_seen":"2025-09-11T17:19:09.761048Z","last_seen":"2026-09-14T23:50:28.719186Z","times_seen":14170,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Oswald:wght@500;700\u0026family=Inter:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:10.957Z","timestamp":1789397950957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Oswald:wght@500;700\u0026family=Inter:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 14:59:11 GMT\r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9046,"size_decoded":1510,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bc77aaf922d194324ef5df46b551b516","sha1":"23d0d4bc54b84567749df9c00f8910f95d40b776","sha256":"9d16ff72df1a02faf3ac169a4aaeec130f4a92c24f64bb64bc766cda518a0ddb","sha512":"9dee526c66f648456bd95459991536edadf7dfac2f71017ecd5ac46a682c7ef9d86e588e102738d86642273a2738802571e6c853b86e85433fe22758fc89c631","ssdeep":"192:9NNIxO34OxDNNryfO3iExluWoKvSs2eWSKBossT:vXJphJy7o","tlshash":"da12eba2042ba440ab470dc233cf3e3aae8f51556095c5795ffd0cd8aceed62036979e","first_seen":"2026-03-01T10:04:45.899905Z","last_seen":"2026-09-14T15:00:20.127413Z","times_seen":7,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/qg7JJ7I.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:10.968Z","timestamp":1789397950968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /qg7JJ7I.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Feb 2023 11:44:52 GMT\r\netag: \"069c4cd50be44d13b639a862b556e1f8\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: tE07UO9zt1DB74c1DQ_rsK4kzQgl7IOgFVIPQfbX2t__bq0x-pRjmA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2726667\r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 196, 0\r\nx-timer: S1789397951.087700,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 270412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270412,"size_decoded":271206,"mime_type":"image/png","magic":"PNG image data, 587 x 900, 8-bit/color RGBA, non-interlaced","md5":"069c4cd50be44d13b639a862b556e1f8","sha1":"2b7c533ca664a1f23f57f55b4f6d7a63a6c18cff","sha256":"e319cba9e5b7830148e863864b20b1f5b171ec03c2e6543c11c186fa9a491f68","sha512":"8362eb8527429cb49175845fb60d3a30d87d8b3fc4dc0e0abb519f98639101a7d1396ea4ebdee6e26a4d804641d8efe90baf9d8bdcbe8ae176b23525dfa332c7","ssdeep":"6144:Pn5bDK4xQA8c9EpXFjyUJ4humga4vtoVMI0Mkbdv0mIILXOT:Pn5iA8ikyUJ4h0jt2OOT","tlshash":"4a442358b444e9d9017a7f924e5d6f8b57c182b97f0c8a2fd61c093adb4688a3ec3f05","first_seen":"2026-09-14T14:59:44.40958Z","last_seen":"2026-09-14T15:00:20.119989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":74,"dns":0,"connect":11,"send":0,"wait":11,"receive":28,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorantinfo.com/images/ru/champions-2021-karambit_valorant_full_skin_154996.webp","fqdn":"valorantinfo.com","domain":"valorantinfo.com","tld":"com"},"ip":{"addr":"109.95.159.1","port":443,"asn":48896,"as":"dhosting.pl Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:10.970Z","timestamp":1789397950970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorantinfo.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 03:37:17 GMT","end":"Fri, 06 Nov 2026 03:37:16 GMT"},"fingerprint":{"sha1":"60:5B:AF:27:2A:BD:4B:E3:7E:78:4D:39:B4:1B:C9:E5:00:9A:EE:4F","sha256":"7B:0B:51:27:0A:FE:87:BB:27:69:D1:14:57:48:92:B7:00:17:A8:84:8A:72:8B:20:41:37:66:2D:31:BF:BF:17"}}},"request":{"raw":"GET /images/ru/champions-2021-karambit_valorant_full_skin_154996.webp HTTP/1.1\r\nHost: valorantinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 14 Oct 2026 14:59:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 21 Oct 2025 21:21:39 GMT\r\netag: \"4826-68f7f963-5c7bb25a96494dde;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 18470\r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18470,"size_decoded":18859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adbc4f2be88bb655e4c72eae92066f4e","sha1":"e124d571b1a0621431079a06f42c0c4392e5a716","sha256":"3b82717897c7ed12d38b7d6b5350b5a4d1d6ccf9c43329c93d96a3534bedf54a","sha512":"c449d0e92f95bf87196252253215238f133a6eb7395d8d0639676f3813efbebae72520fccad10cd1a0ef17a65ce3f8adad36e90b43446997af5469f3c456c63f","ssdeep":"384:6fue0Sn5u1SkODV5yGxs3KF52fwdupqN5FDJvMukt+n61v:W026S1ZNe3rKgS5ch+ng","tlshash":"5c82df962037a04351427105a6c6d102e7bed2132311dfe7be36e8f61a602d3cea9bec","first_seen":"2023-12-05T09:24:20Z","last_seen":"2026-09-14T15:00:20.118112Z","times_seen":17,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":74,"dns":46,"connect":27,"send":0,"wait":29,"receive":27,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1614850523459-c2f4c699c52e?q=80\u0026w=2070\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:11.072Z","timestamp":1789397951072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1614850523459-c2f4c699c52e?q=80\u0026w=2070\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: a232d5720ff5eb6d4689ab75509a171ec567ad61\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 17 Aug 2026 17:34:43 GMT\r\nserver: imgix\r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\nage: 2409868\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230164-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12975,"size_decoded":13606,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1ff08a4b7c83a713525c73ec0e6c1137","sha1":"84158815d2c8a0d1eabd658bc599309ffbd321db","sha256":"7ebbf0d9b8e04c398bf25886ab6be69ce93b1b84bb71961717782d71b0cad6a8","sha512":"34b23758c0fd285cdd07d79139cdb36566f979faba6ce638bad5b4db3511392b6385655dd982e9a18190c0f3b3bb23f666aa6c4d53aa6ccb1d06c2329136cf95","ssdeep":"384:lYNg7k6quPzkj7p+H3B7LFaj6B2xDhlTdeo:lYyvqOkMx75ajQqx","tlshash":"3642af33e6eb8f53e538f5b065a0c7ece293b72fee221b4a95c1662209100e15b4d5cc","first_seen":"2026-09-14T14:59:44.412628Z","last_seen":"2026-09-14T15:00:20.122196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":11,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wikia.nocookie.net/valorant/images/1/13/Astra_Artwork.png/revision/latest?cb=20210301120253\u0026path-prefix=ru","fqdn":"static.wikia.nocookie.net","domain":"nocookie.net","tld":"net"},"ip":{"addr":"162.159.142.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:10.965Z","timestamp":1789397950965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wikia.nocookie.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:07:34 GMT","end":"Mon, 07 Dec 2026 14:07:33 GMT"},"fingerprint":{"sha1":"27:3E:68:02:85:2B:0F:DC:EA:E4:90:CB:F7:F8:B1:D6:46:15:60:FD","sha256":"D0:55:D2:5B:A1:5B:0D:76:EF:02:62:04:92:AD:9C:F2:42:D2:8D:CA:74:3C:4F:7E:51:21:CD:38:C5:01:4F:E5"}}},"request":{"raw":"GET /valorant/images/1/13/Astra_Artwork.png/revision/latest?cb=20210301120253\u0026path-prefix=ru HTTP/1.1\r\nHost: static.wikia.nocookie.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 14 Sep 2026 14:59:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 109662\r\nsurrogate-key: b5a1fcaf83f1f197e3b86e6255ff98388f5a3557 wiki-ru-valorant thumblr original v:fecce6ce\r\ncontent-disposition: inline; filename=\"Astra_Artwork.webp\"; filename*=UTF-8''Astra_Artwork.webp\r\netag: \"fO0HbACTxzhPAZeEBBKoxA==\"\r\nx-thumbnailer: Thumblr\r\nvary: Accept\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Range\r\nx-cache-hits: ORIGIN\r\nx-cache: ORIGIN\r\nx-served-by: thumblr-77c4bff7b4-htv8z\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr\r\ncache-control: public, max-age=31536000\r\nnel: {\"report_to\":\"nel\",\"max_age\":604800,\"failure_fraction\":0.01}\r\nreport-to: {\"group\":\"nel\",\"endpoints\":[{\"url\":\"https://services.fandom.com/browser-errors/report\"}],\"max_age\":604800,\"include_subdomains\":true}\r\nx-envoy-upstream-service-time: 126\r\nserver: cloudflare\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 18018605\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=CoBnkRawBWIFi_DGTdkfKmiU2gPT1fDxJ4RS0Y9l6uM-1789397951.0791435-1.0.1.1-B4Mr6CrrF8TWZCZEY8YR4xZ3fobPUhhcbYpAwkk8gSO3JFXrpCUrJZXd3vAX_pQobsyPK8t50AckJqOuSW0ONH0hX.VQm9e17jnXlLC3j.3U5YpnoKk0CmNUWZ7jGERu; HttpOnly; SameSite=None; Secure; Path=/; Domain=nocookie.net; Expires=Mon, 14 Sep 2026 15:29:11 GMT\r\ncf-ray: a3b0410a38d656bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"CoBnkRawBWIFi_DGTdkfKmiU2gPT1fDxJ4RS0Y9l6uM-1789397951.0791435-1.0.1.1-B4Mr6CrrF8TWZCZEY8YR4xZ3fobPUhhcbYpAwkk8gSO3JFXrpCUrJZXd3vAX_pQobsyPK8t50AckJqOuSW0ONH0hX.VQm9e17jnXlLC3j.3U5YpnoKk0CmNUWZ7jGERu","quoted":false,"path":"/","domain":"nocookie.net","expires":"2026-09-14T15:29:11Z","raw_expires":"Mon, 14 Sep 2026 15:29:11 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=CoBnkRawBWIFi_DGTdkfKmiU2gPT1fDxJ4RS0Y9l6uM-1789397951.0791435-1.0.1.1-B4Mr6CrrF8TWZCZEY8YR4xZ3fobPUhhcbYpAwkk8gSO3JFXrpCUrJZXd3vAX_pQobsyPK8t50AckJqOuSW0ONH0hX.VQm9e17jnXlLC3j.3U5YpnoKk0CmNUWZ7jGERu; HttpOnly; SameSite=None; Secure; Path=/; Domain=nocookie.net; Expires=Mon, 14 Sep 2026 15:29:11 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":109662,"size_decoded":111143,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ced076c0093c7384f0197840412a8c4","sha1":"7ad7a9afec1b8c92f7c2d39a5fd318cf57a32427","sha256":"4d7aaf64f032573b3dba5581eef39d8d8928fe08cfae2e65204e6044eeae3454","sha512":"b2183e8591624e3c45c46b14b2815e457b779fcd7a7296b55bdc2fd1cc7b548a8a5adbcb9e31e0bf47789091bba2a7a8028534e0c226510b1871ca795164247e","ssdeep":"3072:9NNFdFwEFfzydIE19tcFf6T2dDsMzTfGLpp+:nHdPFfuXJcBe0sQTfG+","tlshash":"08b302ff9fc5a540ba0c72a0e0f3f2e13eb35389e219ad8432d615c15ea5c6585a13f6","first_seen":"2026-09-14T14:59:44.414103Z","last_seen":"2026-09-14T15:00:20.126651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":74,"dns":0,"connect":4,"send":0,"wait":46,"receive":5,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:11.114Z","timestamp":1789397951114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoterno.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:37:41 GMT\r\nexpires: Fri, 10 Sep 2027 10:37:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 361290\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-15T01:52:04.556274Z","times_seen":288219,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valoterno.top/valorant/counter","fqdn":"valoterno.top","domain":"valoterno.top","tld":"top"},"ip":{"addr":"138.226.236.192","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://valoterno.top/","date":"2026-09-14T14:59:12.227Z","timestamp":1789397952227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valoterno.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 15:39:25 GMT","end":"Sun, 06 Dec 2026 15:39:24 GMT"},"fingerprint":{"sha1":"64:10:0C:F9:C8:11:09:0C:18:23:86:AC:F4:5A:AB:30:0C:71:C8:44","sha256":"60:62:12:02:6B:86:3C:B2:B1:AD:B1:B9:A2:52:41:9F:77:13:FB:FD:E2:DD:35:04:56:08:CD:4D:0B:2B:F4:C6"}}},"request":{"raw":"POST /valorant/counter HTTP/1.1\r\nHost: valoterno.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 401\r\nOrigin: https://valoterno.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":401,"data":"{\"action\":\"visits\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"width\":1280,\"height\":1024,\"colorDepth\":24,\"timezone\":\"UTC\",\"hasLocalStorage\":true,\"hasSessionStorage\":true,\"hasWebGL\":true,\"gpuInfo\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe, or similar\"},\"hasTouch\":false,\"cpuCores\":8,\"deviceMemory\":\"Unknown\",\"doNotTrack\":\"unspecified\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Mon, 14 Sep 2026 14:59:12 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 16\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16,"size_decoded":282,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-09-15T01:49:56.344072Z","times_seen":189417,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"valoterno.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"valoterno.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}