{"report_id":"eb00ea87-9a7c-421d-865b-94db414a01e9","version":6,"status":"done","tags":[],"date":"2026-05-13T13:11:15Z","url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":0,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"title":"MegaETH | The First Real-Time Blockchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":0,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-17T13:11:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-13T13:10:52Z","timestamp":1778677852,"ip_dst":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":34226,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI","source":"{\"timestamp\":\"2026-05-13T13:10:52.445119+0000\",\"flow_id\":232649660346226,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":34226,\"dest_ip\":\"209.94.90.2\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045146,\"rev\":1,\"signature\":\"ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_21\"]}},\"tls\":{\"sni\":\"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":976,\"bytes_toclient\":2714,\"start\":\"2026-05-13T13:10:52.438130+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"domain_registered":"2017-02-24","domain_rank":0,"first_seen":"2026-05-13T13:11:16.636062Z","last_seen":"2026-05-13T13:11:16.636063Z","alert_count":10,"request_count":10,"received_data":7990143,"sent_data":6861,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}]},{"fqdn":"q.quora.com","ip":{"addr":"162.159.152.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-29","domain_rank":39022,"first_seen":"2017-05-08T19:06:57Z","last_seen":"2026-05-07T02:59:02.491577Z","alert_count":0,"request_count":1,"received_data":531,"sent_data":654,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4be4255e5a9a1f6b010800d0bf50c684","sha1":"4cc0e05bc1cc7a9e518025bea3184f0bad32fc11","sha256":"0df080d3164d1174ec6331266759f4d463981d1afbef871a572061e4d5e02d91","sha512":"309011c28870100b93ed29a36a8fcc1b7ba0bcbec22ee8f184f8d18f250ebcab3757716dcd70d75e41eb301f43facf8a2fa06627d92d08cf718f4d84ef1c01b8","ssdeep":"","tlshash":"dbe068b73445a9b60ffa743a4132960572b2115cf5d2d600d74a884a24758674c10dcc","size":375,"data":"","first_seen":"2026-05-13T13:11:26.885673Z","last_seen":"2026-05-13T13:11:26.885673Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.quora.com/qevents.js","fqdn":"a.quora.com","domain":"quora.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"213a2084d90a782e0ad733a5aa1e3202","sha1":"30b7403a051fcf5b513e6da073bc9a92be41d027","sha256":"a3b9afdd92edf30d72dd52262c76b75781740b1cb885772194a47529eb1052df","sha512":"386887275ab7eb19187da2858b798c4ccb20d0a2a998852ff548cc54102ecd31cc499055221b14dcd8ecaba907daccd4fbc553ca3c593af52edea24f090e0dde","ssdeep":"768:1keY2FL4rhrGfV8Cj7szizyzMzKNSu3eq9zdlN:qe/+hrGfVXFu5XN","tlshash":"36131984ba90a0b642e765d1013fa547f23b696a304844a4f7a1ccd2ecf4e9f506fe7c","size":41678,"data":"","first_seen":"2024-10-29T03:42:35.27635Z","last_seen":"2026-06-03T01:02:10.237231Z","times_seen":15519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/js/ultrakit-1.5.7.js","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f6aadf1e4b81a9fd25e10ec46fcce5d","sha1":"2fdee54e28ab81554851546628e2de3a7bba571d","sha256":"476c1eeb5b6c3520f192d34ffe0ba5aee97d7385468a6dc368b4d243c93a2075","sha512":"caabaf786e1524c0891c5da6623d597dc74c0a7a7cababb96ec2e1cb50a8369e465bcb6e658f27b461b5abc938857510c36d5212c7d2a6e2a06a7f178e444e67","ssdeep":"768:oCcmXcyNlxwAEtrMmDlqLMITsywQkgEe6SZcN/csf5cNCcn1coxoc/c98c+WlTA3:RlrYMkltI4mfYCffpEW8u","tlshash":"fe9350d5980b94948e4562ded47bed08e4284eb3cdacb1a7b92cdec1752df22c48712f","size":89249,"data":"","first_seen":"2026-04-30T07:07:02.162673Z","last_seen":"2026-05-14T18:46:20.704293Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/images/7cfb7f2195e3b94f9e53e611524667ddae69041d.ico","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:55.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /images/7cfb7f2195e3b94f9e53e611524667ddae69041d.ico HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 13:10:55 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-ray: 9fb1e7f329b2c272-OSL\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/images/7cfb7f2195e3b94f9e53e611524667ddae69041d.ico\r\nx-ipfs-pop: rainbow-rbx-16-102\r\nx-ipfs-roots: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm,bafybeiasdhqsqbnuzrizhrouaoatrmyn676mksmdcnxymy6rv3mfkz6era,bafkreieeucnkrrm5s4dzuujf4lbyzwvf62mo5ww67243szwifuk734zt2y\r\netag: W/\"bafkreieeucnkrrm5s4dzuujf4lbyzwvf62mo5ww67243szwifuk734zt2y\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf57820134b35af7f4f02e9f1ba7cff8","sha1":"7cfb7f2195e3b94f9e53e611524667ddae69041d","sha256":"84a09aa8c59d97079a5125e2c38cdaa5f698eedadefeb9b966c82d15fdf333d6","sha512":"5491a61121fd9a99b3e1ac1e213f774d9a4eedf5e65aeb3ba55bc7c474a50387eed265daee77471fbeadbdbf2c20c90b64ab7dffcefa23f14701e025100cd0b8","ssdeep":"","tlshash":"0f615ddfc812951597290e22bc1fddcaf9ad02f5db30cc61bf926431f62b91d951a138","first_seen":"2025-09-03T17:27:13.432757Z","last_seen":"2026-07-08T12:41:38.465943Z","times_seen":131,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T13:10:52.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 13:10:52 GMT\r\ncontent-type: text/html\r\ncf-ray: 9fb1e7e1d8d28deb-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 77700\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nset-cookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz; SameSite=Lax; path=/; expires=Thu, 14-May-26 12:10:52 GMT; HttpOnly\r\nvary: accept-encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/\r\nx-ipfs-pop: rainbow-rbx-106-108\r\nx-ipfs-roots: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":151667,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e17a3ae4eaf5f99265eda6b4d4ccb67f","sha1":"d852efe0153aa8fd2f525d82b4cb7db270d58bdb","sha256":"a66dabdedb57d4641598ce09c8981e7ac9272087d4ee486e93306a28656321c1","sha512":"4fc2dc8a848c919bcfa09ed53fcd862a4ce312f438c86e5810c95dc6ff38e4d8d31865ec0b81644002a69245240d9dce3a3192d8d706553343887c6a11ad10ec","ssdeep":"1536:XUHILM+F6E5ToDNl1UHQJlQBBvJwgGKGczly10aGkeje1emeleZe+eneCes:kHILlF6okNlew+vJwgGKGczl9aGP","tlshash":"1fe3749e69b201251c23b1bd97ef5668b23ae083dd1fdc647ecc2605cfc82e49e92745","first_seen":"2026-05-13T13:11:26.873465Z","last_seen":"2026-05-13T13:11:26.873465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":32,"dns":23,"connect":1,"send":0,"wait":116,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/js/ultrakit-1.5.7.js","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:52.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /js/ultrakit-1.5.7.js HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 13:10:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb1e7e3d8ebc272-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 77698\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/js/ultrakit-1.5.7.js\r\nx-ipfs-pop: rainbow-rbx-106-108\r\nx-ipfs-roots: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm,bafybeiajmbvmp2uapzlmslow6wv5bxfpdu3bl5x2vf2xabn7h5etsouwmy,bafkreichnqpoww3mguqpdewtj77axjno5f6xhbkgrjw4g2fu2jb4soraou\r\netag: W/\"bafkreichnqpoww3mguqpdewtj77axjno5f6xhbkgrjw4g2fu2jb4soraou\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":89249,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6f6aadf1e4b81a9fd25e10ec46fcce5d","sha1":"2fdee54e28ab81554851546628e2de3a7bba571d","sha256":"476c1eeb5b6c3520f192d34ffe0ba5aee97d7385468a6dc368b4d243c93a2075","sha512":"caabaf786e1524c0891c5da6623d597dc74c0a7a7cababb96ec2e1cb50a8369e465bcb6e658f27b461b5abc938857510c36d5212c7d2a6e2a06a7f178e444e67","ssdeep":"768:oCcmXcyNlxwAEtrMmDlqLMITsywQkgEe6SZcN/csf5cNCcn1coxoc/c98c+WlTA3:RlrYMkltI4mfYCffpEW8u","tlshash":"fe9350d5980b94948e4562ded47bed08e4284eb3cdacb1a7b92cdec1752df22c48712f","first_seen":"2026-04-30T07:07:02.162673Z","last_seen":"2026-05-14T18:46:20.704293Z","times_seen":8,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.quora.com/_/ad/81648c2480c5423b9abaad03749d1fed/pixel?j=1\u0026u=https%3A%2F%2Fbafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link%2F\u0026tag=ViewContent\u0026ts=1778677853060","fqdn":"q.quora.com","domain":"quora.com","tld":"com"},"ip":{"addr":"162.159.152.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quora.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 06:08:11 GMT","end":"Sat, 08 Aug 2026 06:08:10 GMT"},"fingerprint":{"sha1":"00:8B:5C:5C:0B:59:00:F9:17:AB:03:5E:BD:0C:0B:94:F5:65:88:81","sha256":"58:72:F1:5F:30:59:EC:49:EE:A3:51:62:29:59:A4:93:B6:7B:3C:A9:89:4E:0A:83:E6:61:6B:BA:CB:D9:41:73"}}},"request":{"raw":"GET /_/ad/81648c2480c5423b9abaad03749d1fed/pixel?j=1\u0026u=https%3A%2F%2Fbafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link%2F\u0026tag=ViewContent\u0026ts=1778677853060 HTTP/1.1\r\nHost: q.quora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 13:10:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-q-stat: ,46be0d60b5fb51e17dcc177a5f0eea57,10.0.0.141,30240,91.90.42.154,,16690759549,1,1778677853.176,0.001,,.,0,0,0.000,0.001,-,0,0,184,201,100,10,34729,,,,,,-,\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9fb1e7e60a545a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-07-24T05:02:13.750574Z","times_seen":109826,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/fonts/32a5639cbf87b4992575738e1f72578d7530744c.otf","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /fonts/32a5639cbf87b4992575738e1f72578d7530744c.otf HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 13:10:54 GMT\r\ncontent-type: font/otf\r\ncf-ray: 9fb1e7e5c877c272-OSL\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/fonts/32a5639cbf87b4992575738e1f72578d7530744c.otf\r\nx-ipfs-pop: rainbow-rbx-16-102\r\nx-ipfs-roots: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm,bafybeicmrd66w6aqklnloa5smdkicdp5hxyak5xpmnd36akalmivfcbxpy,bafybeico33agoehroilzmz2aby6sxzzw6zfzmci6yrd4j2pf6lnjnb7ipe\r\netag: W/\"bafybeico33agoehroilzmz2aby6sxzzw6zfzmci6yrd4j2pf6lnjnb7ipe\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":609908,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"b3ac1bd5e427f84b07373609c6e63d4a","sha1":"32a5639cbf87b4992575738e1f72578d7530744c","sha256":"14928444e337995a7fe9bae85e20b83139f6e0c78416df87feaf68613d41e02e","sha512":"f0982ff299c03d971b14352d2f58f7b51497d3bbdc99f6129f4feb85c66b32f155aa880364b29b6d60c1b57708df44aefb5b34e2d0e6cef7c22549906f28b0a7","ssdeep":"6144:X3Ax9NKA6vWW+LWu4UEvLcEBt2i/PcR86YRNqDKcMxgxb4sjYGKz:X3q6vWW+LWu9EwZi96Yzq+cMxgxPA","tlshash":"72d452111604bd56cf941206cceec6950eb3bacf8f1977d66d6312cb8fc9d1e162e22a","first_seen":"2023-09-10T08:23:33Z","last_seen":"2026-07-19T03:04:35.116607Z","times_seen":281,"resource_available":false,"data":null}},"time_used":1521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1482,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/fonts/10ef7b1c22254ba295d67b6cb03595b1fd70e216.ttf","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /fonts/10ef7b1c22254ba295d67b6cb03595b1fd70e216.ttf HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 13:10:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12772\r\ncf-ray: 9fb1e7e5d8a7c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=29030400, immutable\r\netag: \"bafkreibdlz26l7lefeydzlrjkghbcjls6vp6n6h2myqcdfgsdpfkh4b4ti\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/fonts/10ef7b1c22254ba295d67b6cb03595b1fd70e216.ttf\r\nx-ipfs-pop: rainbow-rbx-16-102\r\nx-ipfs-roots: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm,bafybeicmrd66w6aqklnloa5smdkicdp5hxyak5xpmnd36akalmivfcbxpy,bafkreibdlz26l7lefeydzlrjkghbcjls6vp6n6h2myqcdfgsdpfkh4b4ti\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":12772,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"800e58743d8cb5e90d3ca06ef8c7ac2d","sha1":"10ef7b1c22254ba295d67b6cb03595b1fd70e216","sha256":"235e75e5fd6429303cae29518e112572f55fe6f8fa66202194d21bcaa3f03c9a","sha512":"de98a42534b93262d248f1f26b54e7a68c19875b34981e96cbf0c22104c93ef91a123b24747d7a237a80c32d5a7a7e075c0a20119e1607e71d66a8c5b0253638","ssdeep":"192:KcHfEXTM7n1aXQBG5JrajK6a+QPBb8EUrhyrVVzxy7W+g6xezH73jT27//Mp:Kc8DMRCSU1BHTyK+heT73j5","tlshash":"4642e91ad3a9cb6af44733bcdde21741e7b65740f3a9e74b000d9066ea582c4859873f","first_seen":"2025-09-03T17:27:13.566566Z","last_seen":"2026-07-08T12:41:38.468624Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1340,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1336,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link//secureproxy.php?e=jscdn/getFile","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"POST //secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"i1ilq64kc03hl35eh0hh\"}"}},"response":{"raw":"HTTP/3 307 Temporary Redirect\r\ndate: Wed, 13 May 2026 13:10:53 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nlocation: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/secureproxy.php?e=jscdn/getFile\r\nx-ipfs-pop: rainbow-rbx-16-102\r\ncf-cache-status: DYNAMIC\r\nx-robots-tag: noindex, nofollow\r\npriority: u=4,i=?0\r\ncf-ray: 9fb1e7e84aecc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":42,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T04:50:52.682529Z","times_seen":17493390,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/assets/eleven.js","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:52.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 13:10:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb1e7e3c8b8c272-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 76226\r\ncache-control: public, max-age=29030400, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/assets/eleven.js\r\nx-ipfs-pop: rainbow-rbx-247-80\r\nx-ipfs-roots: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm,bafybeieo6rguwi7boycnvftiavpms5qcidlkh2eqkkyonxqtz7ud27n4nu,bafybeiasczl57izeodvhzy35uoxx6fcsec2a43rahc23zc67ioo2rpqf5i\r\netag: W/\"bafybeiasczl57izeodvhzy35uoxx6fcsec2a43rahc23zc67ioo2rpqf5i\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":7113933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62851808d35a19a388e28322acb50c32","sha1":"9246ecbbf04b8321f24277696e6da8e50e453c3b","sha256":"1dcc048947d4b37eb39849e83a5a99a6e5d5448d0871e1a2f1265c0c2b956ad5","sha512":"d1a55d3b22d1ee3091f90b55fa323ab28cea8348c4f9b8fcfd9dba59bb8174720004b5fd0ae42d72bbd2f648be559898aefbade4ba6478c6d2267bd8c8dddf84","ssdeep":"24576:apfRyhK29Fcq5jIDfgVoOVta8ZIWAcFBra+y:aK4MO","tlshash":"c42507cf27d9b5551212307b3d1a2093e4aecc99b98ccd94f797ac2ef84c72ca1b5624","first_seen":"2026-04-24T15:23:09.416345Z","last_seen":"2026-07-14T20:24:26.184529Z","times_seen":189,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/secureproxy?e=jscdn/getFile","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"i1ilq64kc03hl35eh0hh\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Wed, 13 May 2026 13:10:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 42\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nallow: GET, HEAD, OPTIONS\r\nx-content-type-options: nosniff\r\nx-ipfs-pop: rainbow-rbx-16-102\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nx-robots-tag: noindex, nofollow\r\ncf-ray: 9fb1e7e5e8e0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":42,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7d5a4b07c743aa98b1954f345553c79c","sha1":"f55d9f3b1658ab6ed4ca1a759a3bbda3e8bf0f10","sha256":"199a4b151d7ba7657f2d9a65c59cdb6d206cfd99ec841ae36819837d50ab4b97","sha512":"2300dc806d877fa8dea309af502e177e8ea8ec5644042dd2803cab5bc871ea8ba839bd1e69bc9ade3500270c6f26cf42b71df64927282cb8dd60ff6e8092f6f8","ssdeep":"","tlshash":"b190044f07177c411717c7df1f0011511300f1157401170c3c004050170d4f41043304","first_seen":"2023-04-15T06:59:49Z","last_seen":"2026-05-13T13:11:26.884053Z","times_seen":6,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/secureproxy.php?e=jscdn/getFile","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"i1ilq64kc03hl35eh0hh\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Wed, 13 May 2026 13:10:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 42\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nallow: GET, HEAD, OPTIONS\r\nx-content-type-options: nosniff\r\nx-ipfs-pop: rainbow-rbx-16-102\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nx-robots-tag: noindex, nofollow\r\ncf-ray: 9fb1e7e73e6bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":42,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7d5a4b07c743aa98b1954f345553c79c","sha1":"f55d9f3b1658ab6ed4ca1a759a3bbda3e8bf0f10","sha256":"199a4b151d7ba7657f2d9a65c59cdb6d206cfd99ec841ae36819837d50ab4b97","sha512":"2300dc806d877fa8dea309af502e177e8ea8ec5644042dd2803cab5bc871ea8ba839bd1e69bc9ade3500270c6f26cf42b71df64927282cb8dd60ff6e8092f6f8","ssdeep":"","tlshash":"b190044f07177c411717c7df1f0011511300f1157401170c3c004050170d4f41043304","first_seen":"2023-04-15T06:59:49Z","last_seen":"2026-05-13T13:11:26.884053Z","times_seen":6,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/secureproxy.php?e=jscdn/getFile","fqdn":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","domain":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/","date":"2026-05-13T13:10:53.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"POST /ipfs/bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm/secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nReferer: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link/\r\nOrigin: https://bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=0H28vstupeLVXFSB5AgGkiMQBFqbVm6L6G6wBLjRKjz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"i1ilq64kc03hl35eh0hh\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Wed, 13 May 2026 13:10:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 42\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nallow: GET, HEAD, OPTIONS\r\nx-content-type-options: nosniff\r\nx-ipfs-pop: rainbow-rbx-16-102\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nx-robots-tag: noindex, nofollow\r\ncf-ray: 9fb1e7e8ed81c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":42,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7d5a4b07c743aa98b1954f345553c79c","sha1":"f55d9f3b1658ab6ed4ca1a759a3bbda3e8bf0f10","sha256":"199a4b151d7ba7657f2d9a65c59cdb6d206cfd99ec841ae36819837d50ab4b97","sha512":"2300dc806d877fa8dea309af502e177e8ea8ec5644042dd2803cab5bc871ea8ba839bd1e69bc9ade3500270c6f26cf42b71df64927282cb8dd60ff6e8092f6f8","ssdeep":"","tlshash":"b190044f07177c411717c7df1f0011511300f1157401170c3c004050170d4f41043304","first_seen":"2023-04-15T06:59:49Z","last_seen":"2026-05-13T13:11:26.884053Z","times_seen":6,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bafybeidoneag2nrrbjepsq6ink5mu6wtdcwqizo44tjod2pb2ne3ehzkjm.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}