{"report_id":"efd8a7eb-2e9f-4ae6-9ea6-9f11fc6c6649","version":6,"status":"done","tags":[],"date":"2026-02-14T00:40:56Z","url":{"schema":"http","addr":"derpo.icu","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"derpo.icu/","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"title":"Phantom: The crypto Airdrop for everyone","dom":{"size":51717,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15968)","md5":"e227b61b640de0733f396bd895a4dc33","sha1":"f4d210d43a3496ac1408c8d9520397791cdb6d74","sha256":"2685c9a243478e10306a3e7854af93d391db5d2a9c443b76ada24fee9b3fd447","sha512":"4b886683945738a10d1511593577de10357a84f40cb85c7424a099dc41c4feb87b4806a084e9a3e0c8118106152cb2d8126da64c4cb990d6712fe3dd48bf5984","ssdeep":"1536:qzqyrYuZA+R3CxIjUWxPfi5xCQP8wxHlBwW3wCZrp:qzqPj","tlshash":"f8332204f5a0693b7617a1ef22cacfad769130039442666c72bc81d5efc7db369b7818","dom_hash":"domhash1661ec2fb9e1fc5e863d054feb8fe2a1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"derpo.icu","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T00:40:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T00:40:26Z","timestamp":1771029626,"ip_dst":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37700,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-14T00:40:26.835422+0000\",\"flow_id\":321885325400918,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":37700,\"dest_ip\":\"104.21.0.218\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"derpo.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-02-14T00:40:26.826198+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"derpo.icu","ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-02-14T00:40:57.489165Z","last_seen":"2026-02-14T00:40:57.489165Z","alert_count":36,"request_count":12,"received_data":978241,"sent_data":5227,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"derpo.icu/_nuxt/assets/index.js","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d65f079c659be801c54dfb4ecce9f67d","sha1":"47997b456459da82181b2cb36556cc7307ed50ff","sha256":"7ecfd2fe3e6fed768a70829f1b542add05986e8d6cc043af85d247446112c925","sha512":"03f844a1c5b1b8f81c65b45c3fc736a4e37c7fd899068bbd060dea6118fdf590332fdbe242ad488619de2fa2896124145dd06b21182abc692da9553bfb45492b","ssdeep":"6144:UAVUjV4h/H16/t4o/L7iA/mYXXcd06RI4EWOVQ8QpwPmyGM8fgTWQr9mA17bYS4E:YiLpwPB7xjlQJlrfbhCVYpwkCT85mt","tlshash":"45e4d8d3f201d9fa2191ab812af22fb158cb1494fc7f0eabe456cc4d672143693b6794","size":694104,"data":"","first_seen":"2026-02-12T02:09:19.054009Z","last_seen":"2026-02-14T02:04:42.826876Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eb51c442dada3741735366f8d5ac5d69","sha1":"c28fabe41a99234e49ca58ca7a4b19a4da73fbd5","sha256":"d43ff33742bfcbef018c294403476b0e71fe2b875db642b65037a166d45958c3","sha512":"b9d509032e48406393af887b22b6edcc2c313d212df0c0ffbc6c24b252231592772af8d32103010c4687094a5f5978b4f5cf30582089b72f6c0ab9077f788ea0","ssdeep":"6144:sEhV+jf4h/x16/B4o/RLTQAREB7E2yWyxQcj0mVhyGGUhLNivfPd0RqM8fgTGQrY:J0FlGm9a7PP9/PD","tlshash":"01e4e8e1f2419dbb119683953ef227f658161494fcff0eabe4a8880e6b6043791f7394","size":666301,"data":"","first_seen":"2026-02-12T02:09:19.056667Z","last_seen":"2026-02-14T02:04:42.827554Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94a53dbc76d7071d98eb5b45556b27ea","sha1":"5aaed853a68d7f81b1ae133531b15bc23fe476ec","sha256":"e2c345bce98e797b54af7f9d043754273468748461c5cb3572560cd3ab036cb7","sha512":"3da69841ccd47fc71d2bb2d25e315892660ce5db879ffbde1e106b1c87158c685a0765ec0f95e02db1469ee66a2aef755e2329ed79cb211b411081dad2f8d067","ssdeep":"96:q1Ss4Vfs1b5phV9m4A9LVkR2TWY1JDuulhi:44Vfk5phV90TWY1JDjlhi","tlshash":"47420d0876733025c12bb0ab67af22817a3571533419c86936acc7495fe3da4a8ebddc","size":12209,"data":"","first_seen":"2025-11-17T19:30:20.256003Z","last_seen":"2026-03-24T12:59:59.996649Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"derpo.icu/api/visit","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:28.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derpo.icu/\r\nOrigin: https://derpo.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:28 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVkNhey4wdpG3pwEpPgPRNXgV97VLAq56cRtda2GaM7nEsC01dCIXpTp4scX86Z2lpyJJQp3QH4X97pBus%2Fo2k9%2FvZSRHIPSTA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a98b2623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-01T11:36:23.426193Z","times_seen":403519,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/fonts/phantom-cash-font.css","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /fonts/phantom-cash-font.css HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XeUrVMzFbsXVXS8FgySQlmCagpuTEtS56wuM5BKnDZrIQQ0O0pq32ToILc%2F2g%2BxjQMxVfCO%2F%2BQnxhMqyjxkC2I75J4husDTsA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6910c404-12e\"\r\ncf-ray: 9cd883a35a4823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"69488516e8e5b2e88c71bd93cefd145b","sha1":"a205b80eb2c8ae8fe4eca178e9bb03cf0b69a1eb","sha256":"91bca5b377a896a24452a8ea805c882b3d03465f680e2d01643feb604759acaa","sha512":"ac990ab85a56841527f95c9146bd4d6d02093975dff06239f06278d2be3a243e5e6946747f8c491be151469267079d014ebc665eb18986f933af664d1bbdb61a","ssdeep":"","tlshash":"f1e0a710b55e2601d0738c0fb7475b109d0d283b04249004b21d1b254fb24a092d2f2f","first_seen":"2025-11-17T19:30:20.244619Z","last_seen":"2026-03-24T12:59:59.993992Z","times_seen":25,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/img/hero.svg","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /img/hero.svg HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9BEjxFcIHXAIsBBYkuW4dcWPOm7uxdAatjc1wL509AkJ%2Fs52cJ%2Bm3G4La4XLgQ0c2mtKtMQin%2BZXSdscFKKPno9LleKiCa2Cg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6910c404-35f\"\r\ncf-ray: 9cd883a36a4c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":863,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ad72f55909e77468b36364e9de0f265","sha1":"b1f161351f3f3628893224042b0b55ff067ae5cd","sha256":"1bf46c1d99426c47264e0de4ff64a0ff417f4b7856a7c54876aaff7b8f3521a4","sha512":"99e60232d9789bc70cc163bc0ecaa177e4c1427e0ab268ced71596d8edb5f745ee05ec4253a5e2097e96da0ffc41532c053dde71056f163a820d9149a6410e6b","ssdeep":"","tlshash":"d811afda17be93a5f443c3a1f350986c3935a8c39b00852db7dc9f34c19381f8461462","first_seen":"2025-11-17T19:30:20.254513Z","last_seen":"2026-03-24T12:59:59.992359Z","times_seen":27,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/img/intro-bot.png","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /img/intro-bot.png HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 147008\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\netag: \"6910c404-23e40\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ti79bG18vwi%2FVwmU%2F2kAJQOtmZoW3LLP%2Fbrff6uTlln6f%2FB%2FptEOFNeE2WV5eZqlUi2qu%2F5x2G0R8eYAJIoTSDBz5y2POE21pA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a36a4d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1649 x 678, 8-bit/color RGBA, non-interlaced","md5":"555c1173fd3634e65238654bffdf075d","sha1":"b58fe44fa06a5ff049f016f1be8c47c7740df4e8","sha256":"2a7f814987891ffd26da6dad688a59cf95d103ab5cb41daa3e08894bb425a6eb","sha512":"b4e059d805453af50bb09b65ab88a9a4a6de112f52d31e1e1783c39efe50b3770cba4cc91a9dc10892874ab07074ea7ca504059e3321cefa5dbafa61230bd944","ssdeep":"3072:54xninWx3Rlvcv3oqwppv6U3ubA5rORJ2xGEdOZYwvEqEcdJpNe:5413YQniU+bUrU2xGEdO23L4Jp4","tlshash":"98e3124d5ef6c623d73678713098df4d2e625922798db32a51007c422c9bcb27d8beb6","first_seen":"2025-11-17T19:30:20.246688Z","last_seen":"2026-03-24T12:59:59.992908Z","times_seen":27,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/fonts/Phantom-Regular.woff2","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /fonts/Phantom-Regular.woff2 HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/fonts/phantom-font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53540\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\netag: \"6910c404-d124\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCDZDpW%2B%2Bf7TNqcJPuLsv1UZ3y12UENk2Pz0VrjjVRi5cw8W8sIeKydybtVHDfb6S4g3ANPo%2ByS4%2FhGt1I2HD93Al0rGKwRQfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a54a9223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 53540, version 1.0","md5":"5d9ac034fee9fadb316e1d93fc3ec0b8","sha1":"6e1d23c086c0a4d2e3a3b2e464067beaf7b75812","sha256":"18a377ffeadf3557906d1e09997f15e463e86a230c163467bb4ad4ec2538e0ac","sha512":"0726d7e038c36cfd26adc3330b00f0a6892a0a5474994692be88d050762dabbd8a3e897fd8b8d675d0e698c91e4649cdeb47a3ac8b49953394448538629abeea","ssdeep":"1536:3dL0wfF/F3UO9xNAVL7ZupkNYRUHbkAENIP10L:3WiN19xNAV0p4csgnL","tlshash":"5033f18f5536850ec74fa0a406141426188cff3fc69a7bdc28fd3fa69f7a24ad95281c","first_seen":"2024-08-20T14:26:37.604662Z","last_seen":"2026-04-17T07:36:34.571466Z","times_seen":80,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 00:40:28 GMT\r\ndate: Sat, 14 Feb 2026 00:40:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-05-01T11:33:55.976223Z","times_seen":23713,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":119,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/api/config","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:28.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derpo.icu/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:28 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mUi1TE0TLXK1rE09b2AA2FN2fKwlLMOR4WjjMssbyOIEEXLRtRxiSbzZrSlvVNrlktZ9aAKOoBGgFA5u9980N3Da2U%2F4Cb%2FFw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a83b0123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"5a281d74c151100e0fd7f0de15ef6a28","sha1":"a44fee91264ff9a9edf652ed39046a894e8cbb81","sha256":"fdcc58f64768284d17e5acb73e56eba4e0fc5ea9f6b8712fd3e6bdcafa173749","sha512":"6d8f622946894e5502808ae5770066fcd244a68398d0633161f8ecd608268098b658bd5eee42abf66abef8f603e02857e967253cb946d9e03c570a74e8d3b551","ssdeep":"","tlshash":"c0e0e701c651c723e624cdf174201ca7746f73f02c537482c19111c11d49e4984f5ee4","first_seen":"2026-02-14T00:41:03.40187Z","last_seen":"2026-02-14T00:41:03.40187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T00:40:26.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 09 Nov 2025 16:43:52 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeirBZWj0Rl%2FeP%2BkxtXNHCcixW1DdqKEA%2B8t0j3cji8YfMPbZN5wIMEVHRR%2FeKJUwOUR%2Fs1Whxa8SyTM5avvDRECmE8190Y9jA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd8839fda4e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":32687,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (302)","md5":"ae8686754ffda0e8bbf01f10d0fe5eb7","sha1":"05403b9cc36fc5324f15b62266f2c3416a04a3f3","sha256":"ad5d5b2ece6c5814744adae78465b61d481c8ac0b187117fad61c1cb9f2616b5","sha512":"e696d8ab6949c367b0f5b0d547338516368832c141214bf9047d9f251fe7924490de2fc9cffc12fee826df7c1aba96be17a147fd69d6de41662c0dd2a477e559","ssdeep":"192:w7rKn9J+aGh1R4Vfk5phV90TWY1JDjlh6LM8fijZtqCSS4lrpKf:pUT1R4y5phVEPZ8fiF4Tblru","tlshash":"8ce25214b4f2363752b3a2d7339b23667ee0a003e44640283afd87991fe6c52e46f59d","first_seen":"2026-01-20T03:37:24.758811Z","last_seen":"2026-03-24T12:59:59.989842Z","times_seen":22,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":92,"dns":65,"connect":1,"send":0,"wait":265,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/fonts/phantom-font.css","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /fonts/phantom-font.css HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vf24cDLZiqC9gLK2ceIDZFwBnizhSztE5U9QhL52r9syUD9GKyROS8RDr34CB3zuJbF5MTGwvarfVwsdPwTQD%2Fx%2Bie4hdb3W6A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6910c404-23e\"\r\ncf-ray: 9cd883a35a4723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c4fee759e94e51c84e8646fc73ac672c","sha1":"7e8f0e06048d647227a79c7bf5fd96e233f29ea7","sha256":"c25649540a6816793cb50aaa13a83a75bfbf3b0fb2ddcac41ecfa7e182b4c989","sha512":"263607a6841e393ace798e8b943527712147a695f669d89513e4e98eab2e3bc384931f2f29612a57247f8897de06f211366d2b8d9b5975c67d882d803b1ac330","ssdeep":"","tlshash":"59f0a924b00a2002a0334c0fb34b6b10ed4e242b00089108b7ae22094ff21646251f6e","first_seen":"2025-11-17T19:30:20.252543Z","last_seen":"2026-03-24T12:59:59.990403Z","times_seen":25,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/css/styles.css","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\netag: W/\"6910c404-8b09\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPp7Xtq%2BS7xD9zdli3ocGu1wABrHTTZREFpgETXwMSgt5JNuhqU3qPj%2B02B3qMRIa7iTT%2Fr7d5o%2FtrIi%2FIAmwQi3AyofqFfp%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a35a4923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35593,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"50915e8725cd263c869a5434cec80ab3","sha1":"ac97a7e7346a179f05e7c5cf3dd060b3bbbbe362","sha256":"ecaac69b746a337cb0b5eb60e70e27dc889b86a9464125bdfbce0a4770fd60b2","sha512":"44ee4e62b470985beae1359419b2a94ba24941c5032aa9d7220e2ce13489710c867a1bf258396d61d72f6c9dda5f6f4ea6a8ea7b8018e828e287c356d3aaef90","ssdeep":"192:y9g1jn1noSdB11G9A24/dsn9909bQ5YDDSVQy7CTVz1wzjoPtyhjzl+0vEMmdL06:3b1bktlCTVz1cNudYgTXTCACVdeAdUR","tlshash":"b0f2448a6f972855f90ba42c2bfb9786632c8003800dcd793f8d218ddf9a1d99675f4d","first_seen":"2025-11-17T19:30:20.253539Z","last_seen":"2026-03-24T12:59:59.9886Z","times_seen":27,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/_nuxt/assets/index.js","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 00:12:41 GMT\r\netag: W/\"698d1af9-a9cb4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOEYYYm%2B42BZypfqy5F7uZIXlaokoUw35jAqZ%2FfW%2F%2ByNuUUYRjXdhG4OHIjD0yCtV28VmQynmhNpcp4YpdpUWJU5oGAGd6z8QQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a36a4a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (55648), with no line terminators","md5":"cc7c613395b329aa3cca4a2aadc193f6","sha1":"7fda99191b6838cb6f4c65a83619779f5ca6851b","sha256":"a7f53add6c434e7be2202e22ffb9bd06166bed93f42690b0d33926fcd08c3156","sha512":"e9d3e4b4bf5ed47383aab9777b1b1c999105b5bbdd65c7bb3792e306f0b44e08212b1eeff7f91ef80f72744592938c102b334b5fc4ed31c70b2a7ce49deb6fa3","ssdeep":"6144:UAVUjV4h/H16/t4o/L7iA/mYXXcd06RI4EWOVQ8QpwPmyGM8fgTWQr9mA17Slr4E:YiLpwPB7ujlQJlrfbhCVYpwkCT85mt","tlshash":"6de4d7d3f201d9fa2191ab816af22fb158c714d4fc7f0eabe496cc4d672043693a6794","first_seen":"2026-02-14T00:41:03.404762Z","last_seen":"2026-02-14T00:41:03.404762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/img/logo.svg","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:27.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derpo.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:27 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8niYZHS85C%2FUTt8wgrZgrVlyT%2FVPlLTep%2FXc3ss6WWiXK%2FrgMfZKVNY0GNYqscQiTiBsEKUYqMihg2Vc0Lx5DgX1CuDSLPMZLg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Nov 2025 16:40:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6910c404-e2c\"\r\ncf-ray: 9cd883a36a4b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d90f2e1189c29bda756953324522d681","sha1":"964659ec2075385f8589e8e0964b0d5eedb9494c","sha256":"9c6b77259609feeed7b76c408e0958051cecf465665bc9484e56d779bc3cf602","sha512":"762e6261c45c14f18046988690830333e5601564e3279b2cf9c8682d059d3be48fbb04fd4155a79d378bc9a0fbf578bdaa451bfc240bb8c18ce7357d7faca88a","ssdeep":"","tlshash":"6371fcde9bb272e8e0c697b9f7205898b6a998f79b54cb04c24d4eccf596c0d8809800","first_seen":"2025-11-17T19:30:20.250393Z","last_seen":"2026-03-24T12:59:59.991808Z","times_seen":27,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derpo.icu/api/is-banned","fqdn":"derpo.icu","domain":"derpo.icu","tld":"icu"},"ip":{"addr":"104.21.0.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derpo.icu/","date":"2026-02-14T00:40:28.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derpo.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 14:42:15 GMT","end":"Wed, 08 Apr 2026 15:39:35 GMT"},"fingerprint":{"sha1":"AC:2C:A0:BB:BF:85:46:B9:86:97:DA:07:7B:96:B0:94:F1:C0:6B:B6","sha256":"87:5F:EC:7A:02:1C:1D:C6:A6:DA:D9:8E:54:9B:3D:45:0F:EA:8D:0E:C1:42:AC:47:3B:F6:17:AA:F6:BB:CD:FD"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: derpo.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derpo.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:40:28 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQjUWXhW1YuFrRhsEtvYkyIVSxaF%2Fbr7xM4nmCy6fb12JgoBcgvQZZsllXWo3fLXI60anrGSOzn1AnbXvCmppyogg83nlZCkjg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd883a83aff23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-05-01T11:25:35.545202Z","times_seen":107549,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"derpo.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"derpo.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}