{"report_id":"e91e75b5-aa27-435d-bcd8-10bc634c311a","version":0,"status":"done","tags":[],"date":"2026-10-15T16:08:48Z","url":{"schema":"http","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":0,"asn":214351,"as":"Femo It Solutions Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"title":"GiftRefills","dom":{"size":404748,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45200)","md5":"7df51c4f30439fabfb837d34d709470b","sha1":"6cfecdfa023c6c5231d3f83413f927ab0012e591","sha256":"99f6633b31f2de997c21f73cd41624ffcdc0cd533d189947e37875b1b838fcb7","sha512":"2d320a70bb5b6dcdf05044131b3a1401341fe0f4adedbc3ca980ebb49bd5831e946b3a9dddb600a1631d094649affe663cbefc0fa5e5e554c5f7f62a5f580f0a","ssdeep":"6144:B2BzwctcHD6XmYYhncKfj7ZBpuZNwiCOQMVU0EL2HWn9FxO4:VMsMVweeF3","tlshash":"e3845b21c61718256b5703d2f5ccbbda956f83cad91708dcb6ee4150c3ce9a629e23ec","dom_hash":"domhashcf7b33cbd900e858c6140423ed8683d9","first_seen":"2026-10-15T16:01:32.28701Z","last_seen":"2026-10-15T16:09:05.220425Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":0,"asn":214351,"as":"Femo It Solutions Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-19T16:08:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"test000777.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-10-12T09:42:11.321807Z","alert_count":0,"request_count":4,"received_data":145406,"sent_data":1992,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-10-12T15:51:38.541378Z","alert_count":0,"request_count":7,"received_data":8679,"sent_data":3976,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":23525,"sent_data":594,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"test000777.icu","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-06-28T12:47:11.693855Z","last_seen":"2026-10-15T16:01:25.912437Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":576,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xn--cryptoreflls-0fb.com","ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-09-16","domain_rank":0,"first_seen":"2026-10-15T16:01:25.155602Z","last_seen":"2026-10-15T16:01:25.155602Z","alert_count":8,"request_count":8,"received_data":1143755,"sent_data":4283,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":7,"received_data":329319,"sent_data":4070,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-15T18:25:59.493959Z","times_seen":87624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f2875419aae332816854fb2701dc3ba","sha1":"a38bd59a5915f1caa66d40ffec3a0a76216f6532","sha256":"a25da1ef85705e8d2c6e9db760b562a1ff65fe4eb02dbb13322badb17c4ff7b0","sha512":"b19e8ee514446454c880c7a082678f83d625f01a679a0a889bb8cbd1c45da83aa672a8e718e49b55d904f5eba82ae4b4abb6b4e69b45001226eb1c729c8aa965","ssdeep":"","tlshash":"eeb0112b880cbcb208280b00c3c23a0a3c8b22b2e283202208c8800030a8003e2e0282","size":88,"data":"","first_seen":"2026-06-25T12:52:29.333639Z","last_seen":"2026-10-15T16:17:27.892152Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a7da3b211f7178cccbde02ad6545a9e","sha1":"aa6440e4e9b0711e7d9ebf12fc96522587980144","sha256":"7618d3c5ad1cff4e48a21398b90abfa6ffdf6fc27683bd67fb3558e511dd2ae5","sha512":"805a626053afd02979b4ece6edf16443c041a3d43738aeef1723e592fcadbb10a9d80138956652f0e0aa445da98eda894d41fa80bb08cdd91ba039c86fc729a8","ssdeep":"384:sSY0j/7+4B6gzC4EF345ynjbc5Doc9A0y9DgyByLVXBwD1z:1DkgzCXF39jbcNLaILVXBwDx","tlshash":"84a2fa3dca781cf187a302785d5ba9c674f51287635d8d94eeccd09c9bc8385223b9ad","size":22901,"data":"","first_seen":"2026-10-15T16:01:32.36437Z","last_seen":"2026-10-15T16:09:05.308735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d40373ba32e0ba1d63fa2f0fdfc83930","sha1":"504d4a7214664bc9606dfe8476b43c8c8ef6c85a","sha256":"73c4ed7678c2642971c0c13e6c8752bff067523f2b48e5cc6a07025539718c93","sha512":"e3fff7f674866fbf674a931d47c8d88789479a839d7a5f53656b6a5878bd95c911294c15a74d387feb45952c5b970cb4bc6e88a81b1c1dbcf342f4b8af703104","ssdeep":"3072:OHjeK4F46LDny/5IHY5IgHHc3atnfxVdHPDP4ktfbmGuZNKxYVFhCjyJk7x8xXQ3:OHD6XmYYhncKfj7ZBpuZNwiCOQMVU0EL","tlshash":"96f3d8a6ce172d10ab34170729cd77c6891e93ca24630cdd999be798c0de62b25e13fd","size":168795,"data":"","first_seen":"2026-10-15T16:01:32.367364Z","last_seen":"2026-10-15T16:09:05.312629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0a100b787159707664d0282e27630f0","sha1":"845c5a10c83ff17d08182df5223f4d70017ccf44","sha256":"2d58e0f3c91d41a8da1c33e5c979be5ab1d7c238802d496a7717146dc6ed8931","sha512":"aa6590d4019c8d37e4d85ae426601af40b780d34ad0777f19e09aeaf02d1ab8b5bfbc80f6809712323ac6a2ed830c7ee04e40dd0cd88fbf9a3aae9bddd8056b1","ssdeep":"","tlshash":"a3b02b2f3a0c270483f82dde56044208143285022c2d02042406341013248820820553","size":123,"data":"","first_seen":"2026-06-30T17:33:16.686766Z","last_seen":"2026-10-15T16:17:27.8948Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-10-15T18:23:55.412656Z","times_seen":214041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18/umd/react-dom.production.min.js?ver=18","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d4842a904e5d5d1b19240075998b111","sha1":"feb8ddc9d0566a4fa0971a6e1138658618cdacfe","sha256":"35f4f974f4b2bcd44da73963347f8952e341f83909e4498227d4e26b98f66f0d","sha512":"e9ad75d3bad3940e2062980702a6f02c0b719968a905d24572af32e52fda4e07b7069f95024940066d8b3be2a0e75bce591f49319ab53af8e5e6da65b8da5379","ssdeep":"1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm","tlshash":"0cd318e87992f6426ab202ab10ef1443777c9a27784c4cb1e540fddd64b806da17bf8d","size":131835,"data":"","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-10-15T18:20:37.761978Z","times_seen":101685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c9b77431b4f976885f2b34a9d6a3caa","sha1":"f85f81786f63175e32775ef834e93b7fce70ce38","sha256":"6bb3d4f46be2c90c744cf5e4b178e371decbdd7954238631d5ea2f268d3d010e","sha512":"7d388cb5acecb44256ad74ee97494fa4b25b8492e3ec1d6251607c54c8f3bc5729a99c0074ed6da267d4609a0869e0a3c75ce68fd31bdd4085780510568717d0","ssdeep":"","tlshash":"d8618559eb7938db33fa01f3653a4d47eb614436e684d038c9ae631424b1893c375a5a","size":3258,"data":"","first_seen":"2026-10-15T16:01:32.370051Z","last_seen":"2026-10-15T16:09:05.322885Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18/umd/react.production.min.js?ver=18","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e91b2616629791b375867c298dc846cc","sha1":"aa77ae4c49f525bc21de1d04f08a5d73962c7cce","sha256":"d949f1c3687aedadcedac85261865f29b17cd273997e7f6b2bfc53b2f9d4c4dd","sha512":"415b3c2e8e3717d952b81ca469d0dbd284970cbfc16d9e7cf2ead6542470488a1ec10bff1308357fce262b753bf746d9d057e115ad584905262211bea4844a7a","ssdeep":"192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G","tlshash":"2e22d6e4b942f0448a7338f1117f140f727eaea9b84c8db0a196d9d43db45ad9127f4e","size":10751,"data":"","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-10-15T18:20:37.88371Z","times_seen":102053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/themes/oneweb-theme/assets/mount.js?ver=2.1.0","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8a775cbac89d7d4e00b7ddbeeeaa7c5","sha1":"c08c59fe5b61208a593cb68a7c7d5b68372081f1","sha256":"5502e0c54b6511ec6408a63570fd35e2ba24af9ac958b53f46f633bc23831371","sha512":"f11398619be8aab20048205036feb52c91c8480508255a59bd2ae26342a5033d15943f9c9b9f98bad740144b12ce00124e7cdb7e406a4849e724590dfc5980cf","ssdeep":"192:QzJpuQoixAfF158YQnPiMxxjVTefBLFFoFuXAhnz49kw93TRI6NvH8p2l9mFtj4f:cJA2xXxxKsFHOTTt3Lo2Jm07h5FtUH9u","tlshash":"2f520a59f0b624748123a07c621b818979b79207c19ecb60bc5dc4abbfe4568273defd","size":13683,"data":"","first_seen":"2026-06-25T12:52:29.331386Z","last_seen":"2026-10-15T16:17:27.890336Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"63f42b4c18a8af27c5e0f5ae067e4aed","sha1":"3420e542156d1aef125627f32aedcfa48e02f155","sha256":"cd00522833aa258e5b2acb9c84fdf13e211349f4965a657e25d16581bf2b5678","sha512":"91b873afb15a2533d190dfd250441fcc5e37dce9bde1b317b49ef6a5d6340645fe98067918b874a7182dc7d866e2c92678958572d89294bc7a1553b3a7aae9ed","ssdeep":"1536:RDuk/M+7y9YVT7+GccPUIbo5mL7P2oHHx2Lt/MvqFnvUyfid/AxAu6LV3FlGQ9T5:1ueZoRxUO2D","tlshash":"70b33004a6b0008c509b945a767d2e0ff31a621bcd6f6d2877ecc9587f6c5ce29793ac","size":114973,"data":"","first_seen":"2026-10-15T16:01:32.355091Z","last_seen":"2026-10-15T16:09:05.324504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"test000777.icu/exports/images/129a22d94be4bffc375a.jpg","fqdn":"test000777.icu","domain":"test000777.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.117Z","timestamp":1792080091117,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /exports/images/129a22d94be4bffc375a.jpg HTTP/1.1\r\nHost: test000777.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T18:26:10.566629Z","times_seen":19128130,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"test000777.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-15T16:01:30.160Z","timestamp":1792080090160,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLink: \u003chttps://xn--cryptoreflls-0fb.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xn--cryptoreflls-0fb.com/wp-json/wp/v2/pages/4\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xn--cryptoreflls-0fb.com/\u003e; rel=shortlink\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":403015,"size_decoded":78072,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45200)","md5":"5feb0651e11a0b97e91ef91f6a1ce00d","sha1":"8a244c678afca13efaf27e7a36f68122e1c45950","sha256":"96f0be33da85a93237a832c8f385c7bd3a23461260c4342a7f1af330514d0320","sha512":"847762221210553a09dd35904475d02ba1fd837b78b9b4a7069c1e7b0b3b79eeb21ee95cec51bcaf11d00d72595fe2717a934b22cdef96bb9bd2c2c025b8ae4e","ssdeep":"6144:ARG9wctcHD6XmYYhncKfj7ZBpuZNwiCOQMVU0EL2HWn9FxOR:uMsMVweeFW","tlshash":"c4844b70d64718256b2343d7b5ccbbda902e93c9d9170c9cf2aa8114d6cb9b619e33ec","first_seen":"2026-10-15T16:01:32.293611Z","last_seen":"2026-10-15T16:09:05.226266Z","times_seen":2,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":4,"connect":29,"send":0,"wait":296,"receive":30,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/uploads/oneweb/c09f2f6c2fc142ffb65b.jpg","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:30.970Z","timestamp":1792080090970,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-content/uploads/oneweb/c09f2f6c2fc142ffb65b.jpg HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 16 Sep 2026 16:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e3-17767\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96103,"size_decoded":96089,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"88c63594aa3b3a398b8f530a3bab9ede","sha1":"7fa5dbbf895c87480855855c07a23185581d1e9f","sha256":"471f5c69256a58ce0c159683045db2cc1542c26dc40ee3eacbd104663433636b","sha512":"35fb50582a4b155636d45732211d2c79997fd48086f8327ae908b0be07f44011f3e3caa2df71a2756b2279738186a3df0f3181a5c2166328c258215069d6079c","ssdeep":"1536:Q4qegICJh3g4bFp69/38IE8hmak9nP0j0itrnbgNQRD4AGhwwF8uItk1JnRJsEK:VJCJhs/3h7DSP0jJtrnfAXqDtkXRfK","tlshash":"6c9312be93f42689e4666f5ba4c2f398201d8478ece4c71b3246d4c053a2cd5c6dbe75","first_seen":"2026-10-15T16:01:32.317179Z","last_seen":"2026-10-15T16:09:05.230647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":76,"dns":0,"connect":29,"send":0,"wait":58,"receive":58,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/themes/oneweb-theme/assets/mount.js?ver=2.1.0","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:30.976Z","timestamp":1792080090976,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-content/themes/oneweb-theme/assets/mount.js?ver=2.1.0 HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:30 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 16 Sep 2026 16:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e3-3577\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13687,"size_decoded":5439,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1138)","md5":"c8a775cbac89d7d4e00b7ddbeeeaa7c5","sha1":"c08c59fe5b61208a593cb68a7c7d5b68372081f1","sha256":"5502e0c54b6511ec6408a63570fd35e2ba24af9ac958b53f46f633bc23831371","sha512":"f11398619be8aab20048205036feb52c91c8480508255a59bd2ae26342a5033d15943f9c9b9f98bad740144b12ce00124e7cdb7e406a4849e724590dfc5980cf","ssdeep":"192:QzJpuQoixAfF158YQnPiMxxjVTefBLFFoFuXAhnz49kw93TRI6NvH8p2l9mFtj4f:cJA2xXxxKsFHOTTt3Lo2Jm07h5FtUH9u","tlshash":"2f520a59f0b624748123a07c621b818979b79207c19ecb60bc5dc4abbfe4568273defd","first_seen":"2026-06-25T12:52:29.331386Z","last_seen":"2026-10-15T16:17:27.890336Z","times_seen":80,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.688Z","timestamp":1792080091688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:31 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 16 Sep 2026 16:54:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e2-58e0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":6585,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-15T18:25:59.493959Z","times_seen":87624,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.139Z","timestamp":1792080091139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259513\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T18:25:06.553208Z","times_seen":317281,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":24,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18.3.1/umd/react.production.min.js?ver=18","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.159Z","timestamp":1792080091159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /react@18.3.1/umd/react.production.min.js?ver=18 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nfly-request-id: 01KZG6AW293PFVYC1SNGTFXRSQ-arn\r\ncontent-digest: sha256=:2Unxw2h67a3O2shSYYZfKbF80nOZfn9rK/xTsvnUxN0=:\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4b00af9b9c77127-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 14465\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 15 Oct 2027 16:01:31 GMT\r\nlast-modified: Wed, 26 Aug 2026 06:01:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10751,"size_decoded":5141,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"e91b2616629791b375867c298dc846cc","sha1":"aa77ae4c49f525bc21de1d04f08a5d73962c7cce","sha256":"d949f1c3687aedadcedac85261865f29b17cd273997e7f6b2bfc53b2f9d4c4dd","sha512":"415b3c2e8e3717d952b81ca469d0dbd284970cbfc16d9e7cf2ead6542470488a1ec10bff1308357fce262b753bf746d9d057e115ad584905262211bea4844a7a","ssdeep":"192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G","tlshash":"2e22d6e4b942f0448a7338f1117f140f727eaea9b84c8db0a196d9d43db45ad9127f4e","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-10-15T18:20:37.88371Z","times_seen":102053,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3a8.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.872Z","timestamp":1792080091872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3a8.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=5.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":656,"size_decoded":956,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cdf72535fd236b2a7e6ab8e4826b3a4","sha1":"6347d5d55d1d16bdb24b893f70c3372a28258583","sha256":"236f87cf38405432478a58b369400f8d7ce55ffd2c248a4721d1fccb53f8b347","sha512":"c6e373547697d86b452e50e308d5f0d2aa63f054bbfa3f4113fc7e0540d8a52f3c4783ecc178f340dfc9654ddd137f9106bf030016f3ddd688ea0d4cd4bc5ba7","ssdeep":"","tlshash":"d1f07be5927cf8860a80c8498fbf749452d3d19b5b87abe9a5246c207489bcb3541b60","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-10-15T16:09:05.245701Z","times_seen":883,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":9,"connect":18,"send":0,"wait":14,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f512.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.882Z","timestamp":1792080091882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f512.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 276\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":860,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85e68275b969dee2025a71dcd34677ab","sha1":"c5bd5c1ff124b6e3d20661962b6dea063d30bae9","sha256":"da529c0b4b9c509eda412f434fae8c4a950cd11c0da7906b4e0bfaabb6d9d869","sha512":"8a325a231e0a5f3ae59efbad882a68e696c57e4705a99aa10f63dd080c62efbfaf8b6ef38e6bbeadbdbc645616a459c6a3f887f7f5580b795a6afb5000a60510","ssdeep":"","tlshash":"d2d02b7d662c481c402347905d24f44d434d3062324f00ff619d4d792143fbee607d18","first_seen":"2024-04-17T02:46:22Z","last_seen":"2026-10-15T16:09:05.25585Z","times_seen":1870,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":9,"connect":10,"send":0,"wait":13,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.148Z","timestamp":1792080091148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:03:54 GMT\r\nexpires: Tue, 12 Oct 2027 16:03:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259057\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-15T18:26:01.788697Z","times_seen":35741,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":51,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3ac.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.828Z","timestamp":1792080091828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3ac.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":622,"size_decoded":881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78279ce9b1bc7be03b83aec31c42b4ee","sha1":"38c53c41571aed0e2738b8cee3737d773746b0a7","sha256":"a63d5d97190e1857f79c79076b09cd670c2a3974a4c9032a02c7e13255bd9242","sha512":"3605f01c9459728227410e93ee38e99a4bc50f7e738a0e7f59a81967787afaeba24ac9237106c9881614106cad6d5ce43a05f155f1490e22b417d11df94ce107","ssdeep":"","tlshash":"22f042e8f37936450e12cfd7ab9db8c162d73574959404c8f05454385218fcf6dd9e10","first_seen":"2023-05-04T23:26:03Z","last_seen":"2026-10-15T16:09:05.267493Z","times_seen":850,"resource_available":false,"data":null}},"time_used":3318,"timings":{"blocked":-1,"dns":9,"connect":10,"send":0,"wait":9,"receive":0,"ssl":3290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/uploads/oneweb/7bbae7c36f393d1d0f63.jpg","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.115Z","timestamp":1792080091115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-content/uploads/oneweb/7bbae7c36f393d1d0f63.jpg HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 16 Sep 2026 16:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e3-176eb\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95979,"size_decoded":96103,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"5d6d1f0f5b1a00497e66103651212ba9","sha1":"e367b9106018a32fa0ef833609549406c1357f5c","sha256":"e6431f4cc22fde61cc78dd725470488e11b5358a05a7136e306d8302751ab7f9","sha512":"2455a129d50fc69a75b346871b0ffe66c307dcac51d1597df527a78bb0b61bf4e3036f94b66135476706baa62545917da370703d74222ea852200d4c9136c6cd","ssdeep":"1536:5536ftR9OQ1AwkGUglBgO5X1rFVekFmF7tP2pe/cbgPZQQOtjbVYSZXRG9C+OMTK:LKfpOQSL2f5XkkwZ+s2t1YSZqWV9","tlshash":"ed93131f937719a1e0736b21819a60cdd829570f7ca8ab738453ff5fc18b2d894614ed","first_seen":"2026-10-15T16:01:32.327503Z","last_seen":"2026-10-15T16:09:05.268995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":61,"receive":59,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.142Z","timestamp":1792080091142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259513\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T18:25:06.553208Z","times_seen":317281,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":30,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.143Z","timestamp":1792080091143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:03:54 GMT\r\nexpires: Tue, 12 Oct 2027 16:03:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259057\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-15T18:26:01.788697Z","times_seen":35741,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":49,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.3.1/umd/react-dom.production.min.js?ver=18","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.183Z","timestamp":1792080091183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /react-dom@18.3.1/umd/react-dom.production.min.js?ver=18 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nfly-request-id: 01KZPQT1K9B482E1K7V004A4MP-fra\r\ncontent-digest: sha256=:NfT5dPSyvNRNpzljNH+JUuNB+DkJ5EmCJ9Tia5j2bw0=:\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4b00af9e9d07127-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 14464\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 15 Oct 2027 16:01:31 GMT\r\nlast-modified: Tue, 06 Oct 2026 19:35:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131835,"size_decoded":43760,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"7d4842a904e5d5d1b19240075998b111","sha1":"feb8ddc9d0566a4fa0971a6e1138658618cdacfe","sha256":"35f4f974f4b2bcd44da73963347f8952e341f83909e4498227d4e26b98f66f0d","sha512":"e9ad75d3bad3940e2062980702a6f02c0b719968a905d24572af32e52fda4e07b7069f95024940066d8b3be2a0e75bce591f49319ab53af8e5e6da65b8da5379","ssdeep":"1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm","tlshash":"0cd318e87992f6426ab202ab10ef1443777c9a27784c4cb1e540fddd64b806da17bf8d","first_seen":"2024-04-28T16:27:33Z","last_seen":"2026-10-15T18:20:37.761978Z","times_seen":101685,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/uploads/oneweb/bec849706bd0d95750be.jpg","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:30.974Z","timestamp":1792080090974,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-content/uploads/oneweb/bec849706bd0d95750be.jpg HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 16 Sep 2026 16:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e3-27358\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160600,"size_decoded":160618,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"2988c5b6cf79035c4c8cf428e0d963b5","sha1":"9eb4401d603cf07414bde3c1c3b72c3b26a34d57","sha256":"369d47ee79719e035eb153d7ee2718853e8cb9af996f86ca6d1c7a94ad883cc2","sha512":"788c868e883475157870a2be0ea61d1039306c32ae8ecefff80ec3a2e2746ffcbe879217538bbb0270a8810db6243c7390293030bf6eebbf3f6ee1a8832ec7d7","ssdeep":"3072:rHRlW7WoXgB+vk6TpoNMiisoxSE5Tq7eXwglSYj/LlVMoixLio:rHR86oXnMepo9isq1u7eXwglB/Lromo","tlshash":"acf323125b792d0006ba5416380ab5eb72007594fc34af5e0aa6ebd87101bdaafcf6c6","first_seen":"2026-10-15T16:01:32.321102Z","last_seen":"2026-10-15T16:09:05.274403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":31,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/uploads/oneweb/bbe085d7a0f323a31b13.jpg","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.111Z","timestamp":1792080091111,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-content/uploads/oneweb/bbe085d7a0f323a31b13.jpg HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 16 Sep 2026 16:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e3-2a11e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172318,"size_decoded":172607,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"fc92f7ef0ad5c7d1ab17e98f50f93fd7","sha1":"17c1bcd72ae0006618577ee28b516d8520b6635a","sha256":"d42036bbe32511f678e0f26c13fdf507d896c8f5e5db3ea18dfb1a07a15a5757","sha512":"332d7b776ff2d9eac438f142ba2ba2c48683d763a1275671bb4b0d2ec12976e0826f7a6412ec26a7a6ff97a680ff8c7171590ad29f2e4b0c17926f2f06f9b06a","ssdeep":"3072:baO7MY98xnmQ908IeBdcU3DddrU83vVK8ZtqM4Qfchl3zlv8h:OO7MYx5eUU3Dddr7vVKiZfH","tlshash":"3df3234b97148603f70688e7ddb91a5c685b037b5dca523841b8cea656ce3f1c6ecd32","first_seen":"2026-10-15T16:01:32.350397Z","last_seen":"2026-10-15T16:09:05.27554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":59,"receive":60,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--cryptoreflls-0fb.com/wp-content/uploads/oneweb/8b298192ac2bcc1fe76b.jpg","fqdn":"xn--cryptoreflls-0fb.com","domain":"xn--cryptoreflls-0fb.com","tld":"com"},"ip":{"addr":"62.60.226.163","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.114Z","timestamp":1792080091114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--cryptoreflls-0fb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 15:51:02 GMT","end":"Tue, 15 Dec 2026 15:51:01 GMT"},"fingerprint":{"sha1":"2E:FA:1E:F6:66:73:DF:F3:8E:75:2E:BD:37:48:B6:1F:6B:60:79:65","sha256":"42:79:98:32:62:64:A1:F1:8E:5E:C0:F6:6A:F9:19:35:3F:7C:7B:F8:70:6E:FB:8C:D7:C2:FF:AC:D0:71:EB:B8"}}},"request":{"raw":"GET /wp-content/uploads/oneweb/8b298192ac2bcc1fe76b.jpg HTTP/1.1\r\nHost: xn--cryptoreflls-0fb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Thu, 15 Oct 2026 16:01:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 16 Sep 2026 16:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aaac9e3-2b381\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177025,"size_decoded":177290,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"ab07a619d438a36da2fb402501ff9e30","sha1":"54144633cd342d44aa2cf28ee19b6474148d477c","sha256":"d375be165060caf7c7e938a872c3f3ae7f8febdd0592d7dda57bc65b3b94e738","sha512":"8c4c63562a884afc1853a9f49c53fc7af8fea805a3488df879db18639f7e8ece7856b7349389aacd82b2e4ca586b5364bcc52d330be4e447512970daa4a0c930","ssdeep":"3072:WFRrHlE6mlUrvuOmeHueVi4UR8xpTEPelwW3X9Ym4lQGVdwtudHW5tZ2xMShaP0:yRreDgGteOeAL8xFeywQYm45VZd25T2J","tlshash":"6d0412ad9148665c99bdfb13c65da28250802c0a325797087374f87e77cf9ef0b6c9b1","first_seen":"2026-10-15T16:01:32.32511Z","last_seen":"2026-10-15T16:09:05.277928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":59,"receive":60,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xn--cryptoreflls-0fb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.146Z","timestamp":1792080091146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259513\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T18:25:06.553208Z","times_seen":317281,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":37,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900\u0026family=Space+Grotesk:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:30.964Z","timestamp":1792080090964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800;900\u0026family=Space+Grotesk:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 15 Oct 2026 16:01:31 GMT\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22841,"size_decoded":1704,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be53306811345a82d23e554d456bda59","sha1":"1b113e2de6a55f17e6dcd50e5de7100b07936c53","sha256":"c0711eed1357667a2b8970c7dae7f6ce0a99f423202e9c488f890dcba0dff564","sha512":"e4e0dde6612aa68f5902ca1c0cca0c1373dcea11b8a2955bde6562f3a1434d20582ef92f35ac95a596450b331bf776dc1967885c0cb157dc9e70b7a7dbeea7cc","ssdeep":"192:wNA1cO3lnx2rNNIxO34OxvENOPCO3/NxoNNryfO3iExBONEhYO3RrxSfNx0NO3kR:8KkXyMopi+s7KQ5HkVR","tlshash":"fea2aa92002ba500ab971dc233cf7e3abe8e50856085d6796ffd0cc99cded66036876d","first_seen":"2026-10-07T13:42:07.614704Z","last_seen":"2026-10-15T16:09:05.279129Z","times_seen":3,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":41,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.150Z","timestamp":1792080091150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 16:16:22 GMT\r\nexpires: Fri, 08 Oct 2027 16:16:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603909\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-10-15T18:06:20.962351Z","times_seen":22526,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":42,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18/umd/react.production.min.js?ver=18","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:30.966Z","timestamp":1792080090966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /react@18/umd/react.production.min.js?ver=18 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\nserver-timing: cfExtPri\r\nlocation: /react@18.3.1/umd/react.production.min.js?ver=18\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-ray: a4b00af899917127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T18:26:10.566629Z","times_seen":19128130,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18/umd/react-dom.production.min.js?ver=18","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:30.968Z","timestamp":1792080090968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /react-dom@18/umd/react-dom.production.min.js?ver=18 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\nserver-timing: cfExtPri\r\nlocation: /react-dom@18.3.1/umd/react-dom.production.min.js?ver=18\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-ray: a4b00af899927127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T18:26:10.566629Z","times_seen":19128130,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.138Z","timestamp":1792080091138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--cryptoreflls-0fb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259513\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T18:25:06.553208Z","times_seen":317281,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":20,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3ae.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.824Z","timestamp":1792080091824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3ae.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1382,"size_decoded":1129,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1426431eb7c60fb8c072f90acb07ceb","sha1":"475d1d98b7358ee45cb338b85414ce05c88f2ee6","sha256":"eb9b8da31ca230a280bcb5f66143b1580ad722527cd9d9820e523cc33bb88b3c","sha512":"0bcec039504c699de269ccff7a67d0795ac5a0dc5e07776998330d4703221ddd88d029f3d7bd2f405db951b94cf7c894b1e7664ba6c24b3653be8bc553001519","ssdeep":"","tlshash":"ac21dcb625baea861e58895c175fb162fd5f380f0f11d784a0d42a06596d3d7340cef1","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-10-15T16:09:05.293256Z","times_seen":1212,"resource_available":false,"data":null}},"time_used":3554,"timings":{"blocked":-1,"dns":12,"connect":10,"send":0,"wait":8,"receive":0,"ssl":3521},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4f1.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.854Z","timestamp":1792080091854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4f1.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 184\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":184,"size_decoded":768,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3547c9b25b1b9a1da8c06100fc4da900","sha1":"043a33225b0a8096f9287daccc07c3eea95c3974","sha256":"331d62f00a03f10e07dc3a7660891469b6b76e57d78b57a865645a5ae5378486","sha512":"f3197c2e03c2597be2b853662dede171d9af21a35a413c0d74fe8405f5bd6a293e28f469737d545eda1208085132c9e4af0f64d943cbaa01e81e2a281b990be5","ssdeep":"","tlshash":"95c0c0ea807b20458600c2a02e7caeda019220f300cc04e6f1460d24710c3df3dc1e28","first_seen":"2023-05-17T21:55:19Z","last_seen":"2026-10-15T16:09:05.294993Z","times_seen":2531,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4b3.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.863Z","timestamp":1792080091863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4b3.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1017,"size_decoded":1143,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae85f3ba482693c99192d68b402b691c","sha1":"00afcdef98f55954ad726f0753bf2ce0f701cab6","sha256":"369a2f73463f01b0cd5c8329a356b9108d8adf8f85b43d3446a69184853d6dc5","sha512":"55e965b31c8390d99f2504a96ca98d1f8206c67e75fc1092a3e50eca43f6ae3c57fe3dddc4c3123eeb578b9115f1331758783f268e2c112faed7fc17f655c47e","ssdeep":"","tlshash":"f21132ca2370f7c4cc8bc68d2f6ee9d94201a0ae20b940d6690e671c229becd3d08d44","first_seen":"2023-06-17T17:15:03Z","last_seen":"2026-10-15T16:09:05.29883Z","times_seen":2181,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":13,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f34e.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--cryptoreflls-0fb.com/","date":"2026-10-15T16:01:31.886Z","timestamp":1792080091886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f34e.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--cryptoreflls-0fb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 16:01:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 446\r\nlast-modified: Fri, 07 Nov 2025 05:29:29 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":1030,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d963d0ebb1bc7743dc37568e3b7c5cfb","sha1":"9aa85260cd46c479f1eb6c58b42caf8d39da5b9c","sha256":"b55a6ab3403f37e8404dab174ed26b5997f48a67df2ac317c442b86916343d3e","sha512":"54243ca3adaf1e50f4bbb9954b7e3f092bda3e325bd0fc71325d0d1a3762bc4cea4d0e8aa065c2818b51288ba58f9216932ea2fb19c6728b0ccd5881cf1d018b","ssdeep":"","tlshash":"14f0dce157b855dc8985dbd09bbb68a7c1bca126444e00de601d8ff41686a8ff847b20","first_seen":"2024-10-27T04:34:06.390023Z","last_seen":"2026-10-15T16:09:05.303969Z","times_seen":351,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}