{"report_id":"e7d51f71-24ba-4aae-b977-0d5dcc30f4b5","version":6,"status":"done","tags":[],"date":"2026-05-11T11:55:29Z","url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":0,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"title":"Rewards · Polymarket — Earn ETH every week","dom":{"size":31048,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (485)","md5":"99c2e44419b4239da497f1d0ac6f625e","sha1":"8691af95f0133804e9a02f12a6279f88470f500a","sha256":"b92de00c97dec2d53f5926d9bba760ae71949600251c3d46fa0fe057e97bde56","sha512":"3989b7eb02e0c927c06f8a018e3a1a3f72d51a19772fde5753a37a01f4cd60829ce523d349f28ef591060573417a79e66aeeb9d2d4bc3a5de53528e262fc81ef","ssdeep":"384:Krh4XPp51FMWTU+t2OuIVGBxO7wU+1EmqNTCLUSSEthtyyYK3i9i6i1:GhsTUX7U+aHQbi9i6i1","tlshash":"ccd29672a221b13db477e89675c4968e7024e403ed274becf99a7169c5c72f70731b88","dom_hash":"domhashdfb4cdb8650db19412b2fd1a3d04b4da","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":0,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T11:55:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-11T11:55:07Z","timestamp":1778500507,"ip_dst":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":50588,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI","source":"{\"timestamp\":\"2026-05-11T11:55:07.970587+0000\",\"flow_id\":989769905190373,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":50588,\"dest_ip\":\"209.94.90.3\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045146,\"rev\":1,\"signature\":\"ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_21\"]}},\"tls\":{\"sni\":\"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":976,\"bytes_toclient\":1654,\"start\":\"2026-05-11T11:55:07.964069+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"polymarket.com","ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2003-02-04","domain_rank":21681,"first_seen":"2016-11-05T15:07:25Z","last_seen":"2026-05-08T08:34:25.212289Z","alert_count":0,"request_count":1,"received_data":7699,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-05-05T03:16:13.007175Z","alert_count":0,"request_count":7,"received_data":338059,"sent_data":4431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","ip":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"domain_registered":"2017-02-24","domain_rank":0,"first_seen":"2026-05-11T11:55:30.378777Z","last_seen":"2026-05-11T11:55:30.378777Z","alert_count":4,"request_count":4,"received_data":7306139,"sent_data":2392,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b119549bcff8e238b16c4d363575b2bd","sha1":"6254247b80f112681a8f03c23d5a4ba05d25b647","sha256":"8a35e692384b1e91484f62e90a973351f02930af3b15d631ae198170f1bbfd99","sha512":"80f1c7601462fd3248892d6ed0185ca703143a058997d8f5ff130a7aa8eec711560baf6e855ff2a714cbe6a19f744604d05d5bc5953cde52025df5676975b93f","ssdeep":"","tlshash":"ecd02b1e71fa5c742073b22d630ffb45353b104b5049d94539b80ac55fa10b94a46d96","size":273,"data":"","first_seen":"2026-05-08T08:34:28.993479Z","last_seen":"2026-05-11T11:55:32.753121Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polymarket.com/icons/favicon-32x32.png","fqdn":"polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:11.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:59:43 GMT","end":"Tue, 21 Jul 2026 08:59:42 GMT"},"fingerprint":{"sha1":"35:EF:FE:C4:3E:5E:29:23:F0:86:16:B2:40:54:58:B4:29:3E:BA:95","sha256":"9F:74:0F:28:47:98:27:E9:C6:F7:C4:37:E4:35:79:6E:ED:28:02:78:C8:26:EB:B2:65:5A:EF:B9:66:EC:15:0F"}}},"request":{"raw":"GET /icons/favicon-32x32.png HTTP/1.1\r\nHost: polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29661\r\ncache-control: public, s-maxage=3600, stale-while-revalidate=86400\r\ncontent-disposition: inline; filename=\"favicon-32x32.png\"\r\ncontent-security-policy: default-src 'self'; connect-src 'self' https://*.polymarket.com https://*.polymarket.dev wss://*.polymarket.com wss://*.polymarket.dev https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.web3modal.org https://*.amplitude.com https://*.alchemy.com https://*.alchemyapi.io https://assets.vercel.com https://vercel.live https://vercel.com https://cdp.customer.io https://vitals.vercel-insights.com https://*.magic.link https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercomcdn.com https://*.intercomcdn.eu https://*.intercomusercontent.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-next-assets.s3.amazonaws.com https://*.coinbase.com https://*.vercel-scripts.com https://*.google-analytics.com https://www.google.com https://*.facebook.com https://*.facebook.net https://*.redditstatic.com https://*.reddit.com https://analytics.tiktok.com wss://ws-us3.pusher.com https://polygon-rpc.com https://static.ads-twitter.com https://sentry.io https://api.moonpay.com https://static.moonpay.com https://*.fun.xyz wss://*.fun.xyz https://*.quiknode.pro https://*.base.org https://*.zksync.io https://*.daimo.com https://s3-us-west-2.amazonaws.com wss://*.walletlink.org https://*.liadm.com https://api.retention.com https://*.execute-api.us-west-2.amazonaws.com https://alocdn.com https://a.usbrowserspeed.com https://analytics-ipv6.tiktokw.us https://*.snapchat.com https://*.gist.build https://pro.ip-api.com https://www.googleadservices.com https://*.relay.link https://arb1.arbitrum.io https://mainnet.optimism.io https://56.rpc.thirdweb.com https://api.mainnet.abs.xyz https://*.eth https://*.llamarpc.com https://*.drpc.org https://*.publicnode.com https://*.gateway.tenderly.co https://*.meowrpc.com https://*.merkle.io https://*.monad.xyz https://1rpc.io https://rpc.hyperliquid.xyz https://rpc.hypurrscan.io https://rpc.ethereal.trade https://tiles.polymarket.com https://protomaps.github.io https://tile.openweathermap.org https://api.open-meteo.com https://cdn.jsdelivr.net https://*.platform.grcv.io https://*.grid.gg wss://*.grid.gg https://browser-intake-datadoghq.com https://browser-intake-datadoghq.eu data:; script-src 'self' 'unsafe-eval' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.grid.gg https://*.magic.link https://static.moonpay.com https://s3-us-west-2.amazonaws.com/jsstore/ https://api.retention.com https://*.liadm.com https://alocdn.com https://www.youtube.com; script-src-elem 'self' 'unsafe-inline' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://*.grid.gg https://vercel.live https://*.magic.link https://static.moonpay.com https://static.ads-twitter.com https://s3-us-west-2.amazonaws.com/jsstore/ https://analytics.tiktok.com https://cdp.customer.io https://www.dubcdn.com https://www.googletagmanager.com https://*.doubleclick.net https://*.snapchat.com https://sc-static.net https://api.retention.com https://*.liadm.com https://alocdn.com https://www.youtube.com; frame-src 'self' https://*.youtube.com https://*.walletconnect.com https://*.walletconnect.org https://*.magic.link https://vercel.live https://*.polymarket.com https://*.polymarket.dev https://*.googletagmanager.com https://*.google.com https://*.snapchat.com/ https://player.twitch.tv https://www.facebook.com https://buy.moonpay.com https://player.kick.com https://widget.pandascore.co https://*.swapped.com https://intercom-sheets.com https://www.intercom-reporting.com https://player.vimeo.com https://fast.wistia.net https://*.grid.gg; frame-ancestors 'self' https://auth.magic.link chrome-extension://acmacodkjbdgmoleebolmdjonilkdbch; style-src 'self' 'unsafe-inline' https://vercel.live https://fonts.googleapis.com; img-src 'self' blob: data: https://images.polymarket.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://assets.vercel.com https://*.walletconnect.com https://*.web3modal.org https://alb.reddit.com https://www.facebook.com https://vercel.com https://analytics.twitter.com https://t.co https://sdk-cdn.fun.xyz https://pbs.twimg.com https://www.google.com https://*.gstatic.com https://www.googleadservices.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://rp.liadm.com https://www.googletagmanager.com https://jsstore.s3-us-west-2.amazonaws.com https://connect.facebook.net https://*.doubleclick.net https://tile.openweathermap.org https://*.swapped.com https://*.giphy.com https://*.grid.gg https://*.intercomcdn.com https://*.intercomcdn.eu https://downloads.au.intercomcdn.com https://*.intercom.io https://static.intercomassets.com https://static.intercomassets.eu https://static.au.intercomassets.com https://uploads.intercomusercontent.com https://*.intercom-attachments-1.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com; font-src 'self' data: https://assets.vercel.com https://js.intercomcdn.com https://fonts.intercomcdn.com https://vercel.live https://unpkg.com https://fonts.reown.com https://fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; media-src https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://polymarket-upload.s3.us-east-2.amazonaws.com; form-action 'self' https://*.polymarket.com https://*.polymarket.dev https://www.facebook.com https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io; upgrade-insecure-requests\r\ncontent-type: image/png\r\ndate: Mon, 11 May 2026 11:55:11 GMT\r\ndocument-policy: js-profiling\r\netag: \"c69cf6650e5e4acabcd9fa2519e5c4df\"\r\nlast-modified: Mon, 11 May 2026 02:44:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /icons/favicon-32x32.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krrgn-1778500511405-37d9ee59fcb2\r\ncontent-length: 925\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c69cf6650e5e4acabcd9fa2519e5c4df","sha1":"8e5d603ac141b8841ca83c70d912b1118e7499e4","sha256":"5e762537f2857bd7947740412315f6599fcf8907ed76fa182804d2f61c01afcd","sha512":"f8ec8747d817bb8e89bb237d7b9c68246ff9dfbeb606efe55af366464e1ff638d5f3040d47d4ff29563050a0c85af8bd759630e8e4f830d1199f31468d016159","ssdeep":"","tlshash":"ac11b76c1da7292749b2b3f3d85125503131cb3028323323b331bca396d2ed5252ce98","first_seen":"2025-10-18T12:46:58.341845Z","last_seen":"2026-07-26T12:38:31.078596Z","times_seen":32,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":30,"connect":10,"send":0,"wait":31,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9fa0fe318c290daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-07-26T09:43:08.241788Z","times_seen":654,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":76,"dns":37,"connect":1,"send":0,"wait":59,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nCookie: __cflb=0H28v7ZizgWbTai5sqDcJjWQKeQb5kXcZN22Lr48rJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 13 May 2026 11:55:08 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa0fe30ff5f5689-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T13:26:08.889986Z","times_seen":406373,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T11:55:07.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: text/html\r\ncf-ray: 9fa0fe2edbc70883-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 96934\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nset-cookie: __cflb=0H28v7ZizgWbTai5sqDcJjWQKeQb5kXcZN22Lr48rJY; SameSite=Lax; path=/; expires=Tue, 12-May-26 10:55:08 GMT; HttpOnly\r\nvary: accept-encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24/\r\nx-ipfs-pop: rainbow-rbx-106-108\r\nx-ipfs-roots: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":172717,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11503)","md5":"d3025d7b023e79522646d3cd1d987322","sha1":"524ab80879a001085497285710269cbcbf4f12ed","sha256":"3279d46e3640c3c4e849dd9e112ee1e212f02431a960d2d3b9bbd692c61c57ed","sha512":"31a080d1b0af71b1a73b109e1719f70b964006a93f2ada8c176533f5b0ee11bbb1ded498f698f21053d62a4a4e6029a4186b1bd3f121a0c886c9a5fc91d11192","ssdeep":"3072:savY54D19h3TY5dbk2sZJEg4T4aUM/DdZ57qZwygmQip:savY5Iwdbk2sZJEgwTmLp","tlshash":"d7f3197191f7503aa027c5ca67a8b72e3164e09be84b419cf79c17a09fcbdd6ec23644","first_seen":"2026-05-11T11:55:32.741499Z","last_seen":"2026-05-11T11:55:32.741499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":33,"dns":22,"connect":1,"send":0,"wait":94,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9fa0fe317c020daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-07-26T09:43:08.238806Z","times_seen":695,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":72,"dns":38,"connect":1,"send":0,"wait":61,"receive":4,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: 9fa0fe318c2a0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-07-26T09:43:08.242439Z","times_seen":658,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":34,"connect":10,"send":0,"wait":61,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/assets/css2","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /assets/css2 HTTP/1.1\r\nHost: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nCookie: __cflb=0H28v7ZizgWbTai5sqDcJjWQKeQb5kXcZN22Lr48rJY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncf-ray: 9fa0fe30ff4b5689-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 96934\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24/assets/css2\r\nx-ipfs-pop: rainbow-rbx-106-108\r\nx-ipfs-roots: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24,bafybeico4ww4unry6tipuywtygfj6s57pqtpofq4mzhh2abmi7j6yorali,bafkreieysoezecjglsgdy7ru5tn5j4tspsoebls7uw5y4qxloion25ieuu\r\netag: W/\"bafkreieysoezecjglsgdy7ru5tn5j4tspsoebls7uw5y4qxloion25ieuu\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14826,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c380cde3ef6a33fe432aea2ae89be66b","sha1":"2e463e9b760e622d7092e63510c54f215e34b533","sha256":"9893899209265c8c3c7e34ecdbd4f2727c9c40ae5fa5bb8e42eb721cdd7504a5","sha512":"2179bdace297486a9e37d7bbe1a930aec29b1c355f53f9037d4bee863c0a4ed0439accd0cfb42c5f20b51f2ecb334574040b3636b086bd09c6046c067f689583","ssdeep":"192:9NNsR234qhDxNOzi23/Zh8YNr2/23ighlfNEV423RHhGONxQt23kGhHNNC3u23LF:rLtonFdyDHlER","tlshash":"3d62ab92042b9500ab471dc223cf7f366ece10896085d2bd5ffd1cca9cead66436874d","first_seen":"2025-09-21T13:45:29.143541Z","last_seen":"2026-07-26T06:24:53.291598Z","times_seen":514,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 May 2026 11:55:08 GMT\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-07-26T08:26:42.318135Z","times_seen":8984,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":128,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: 9fa0fe319c520daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-07-26T09:43:08.226064Z","times_seen":657,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":84,"dns":35,"connect":10,"send":0,"wait":57,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: 9fa0fe317c050daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-07-26T09:43:08.239475Z","times_seen":659,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/assets/eleven.js","fqdn":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","domain":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nCookie: __cflb=0H28v7ZizgWbTai5sqDcJjWQKeQb5kXcZN22Lr48rJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fa0fe30ef3d5689-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 93961\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24/assets/eleven.js\r\nx-ipfs-pop: rainbow-rbx-16-102\r\nx-ipfs-roots: bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24,bafybeico4ww4unry6tipuywtygfj6s57pqtpofq4mzhh2abmi7j6yorali,bafybeiasczl57izeodvhzy35uoxx6fcsec2a43rahc23zc67ioo2rpqf5i\r\netag: W/\"bafybeiasczl57izeodvhzy35uoxx6fcsec2a43rahc23zc67ioo2rpqf5i\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7113933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62851808d35a19a388e28322acb50c32","sha1":"9246ecbbf04b8321f24277696e6da8e50e453c3b","sha256":"1dcc048947d4b37eb39849e83a5a99a6e5d5448d0871e1a2f1265c0c2b956ad5","sha512":"d1a55d3b22d1ee3091f90b55fa323ab28cea8348c4f9b8fcfd9dba59bb8174720004b5fd0ae42d72bbd2f648be559898aefbade4ba6478c6d2267bd8c8dddf84","ssdeep":"24576:apfRyhK29Fcq5jIDfgVoOVta8ZIWAcFBra+y:aK4MO","tlshash":"c42507cf27d9b5551212307b3d1a2093e4aecc99b98ccd94f797ac2ef84c72ca1b5624","first_seen":"2026-04-24T15:23:09.416345Z","last_seen":"2026-07-14T20:24:26.184529Z","times_seen":189,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9fa0fe318c150daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-07-26T09:43:08.247301Z","times_seen":695,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":74,"dns":37,"connect":1,"send":0,"wait":55,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/","date":"2026-05-11T11:55:08.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link/\r\nOrigin: https://bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 11:55:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9fa0fe319c4a0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-07-26T09:43:08.276437Z","times_seen":692,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":84,"dns":35,"connect":10,"send":0,"wait":62,"receive":3,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}